> [...] first filtering out all the... > I'll use the word "typical" entries. > He identified patterns for these and > lets a script strip these out. A

> [...] first filtering out all the... > I'll use the word "typical" entries. > He identified patterns for these and > lets a script strip these out. As he continues > to identify those types of entries, he adds > patterns for them to the script. > He then focuses on what remains. That's exactly what logcheck does. http://logcheck.org http://logcheck.org