There is a nice utility from Bursttek that will do this. Log Analyzer can read from multiple log sources and if you use exchange it has abilites there as well Chris