Local customizations/Advanced Stuff

• rc.startup script at bootup and anytime
• swatchrc.master filters duplicates, "obviousely bad" stuff
• sw-filter-boot handles reboot syslog messages
• sw-filter-domain does per machine/netgroup filtering
• swatchrc.alek does per-user filtering
• summary-email and cron provide periodic reports
• swatchrc.nscd and swatchrc.yaps filters on specific syslog messages
      A LOT of this is done (in addition to generic reports)
  
  
• Crank up syslog.conf (have lots of disk!)
• Rotate logs on a monthly basis via crontab entry
• Add additional logging capability per program (ex: sudo, NetBackup)
  
  
• Auto-cross feed from addhost database for list of admins to notify
• Also explicit notify list with severity and time window rules
  
  
• All of these could be improved a bit (but they work! ;-)