Amongst Logsurfer's key features are:

• The ability to dynamically modify its ruleset
• The ability to store related log messages together into structures known as "contexts" to be examined together (this allows us to analyze the message along with its context information)

See Logsurfer's homepage at: http://www.cert.dfn.de/eng/logsurf/