> I want it's real time. > It send a mail immediately after syslog make a message. > cron isn't real time. > Is logwatch real time? Change solaris syslogd to syslog-ng. http://www.balabit.com/products/syslog_ng/ http://www.balabit.com/products/syslog_ng/reference/destinations.html -- Teraoka Yoshinori <yteraoka at dti.ad.jp>