thanks for your speedy reply
this is pending a presale was expecting paid support to jump the gun but one can always dream..right and yes i did submit a official
support ticket days ago.
i have the exact scenario isp changes ip every 5 minutes host does not identify itself
so i get lots of unknown ips sending logs mostly end user pcs, tinkering around with facilities to id the incoming ip
just setup snort to my syslog this will help with id but nothing is k.i.s.s (keep it simple stupid)
and here i thought we are living in the 21st century.
too bad you do not have the time, will also check some contract scripting outsource services