http://searchenterpriselinux.techtarget.com/tip/Simple-Event-Correlation-installation-and-configuration