I'd like to do some parsing of the logs that PAM generates (/var/log/auth.log, etc) but all of the logs are simple text, totally meant for human consumption. It'd be a lot easier to parse if each log entry could have something like a condition code or something that could be identified. Specific syntax of details in an entry SHOULD be defined (username being dealt with could be word five [all of the time for a particular condition code], for example) I'm a fairly novice programmer so far and so I can't exactly send any patches to do this yet, but it's something that would make my life easier - writing something to parse logs and make sense out of them. Is there another way to do this that I'm missing? Thanks a bunch, Mathew Johnston
