Hi Greg, As with any SQL logging... With reporting services you can be notified. Also, with notification services you can be notified. And with triggers you Can be notified. Once you have the criteria setup that you want to monitor for it is a breeze to send log notices to any email address or group that you specify. Joseph -----Original Message----- From: Greg Mulholland [mailto:greg@xxxxxxxxxxxxxx] Sent: Friday, April 15, 2005 12:49 AM To: [ISAserver.org Discussion List] Subject: [isalist] Querying logs http://www.ISAserver.org Im looking for something that allows me to be alerted when I get a scan or connection fail/attempt from a particular ip (one I would like to specify). I would like to be able to do it through the alerts stuff but it doesn't allow it. I have thought of logging to a database and writing a query that pulls that info and mails me when it happens, but that is somewhere I will only go if I really need to.. I'm eyeing Jim here with the possibility that a script can do it, but im not sure.. Any suggestions.. G ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: josephk@xxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx