> Like everything else about syslogs, because there was no adequate > guidance on its use, it's pretty much useless. I agree, but I wouldn't say it is useless. I know a lot of folks who actually use it for grouping. While it is not standardized (to be polite), it can be quite useful if applied correctly in ones own environment. Rainer