thanks curtisi, I have since figured how to modify some of the connectors to do some of what I need. However I did want to ask a follow up question. So there is no way to clone and customize the generic connectors for MS Event logs, ie- ntapplication.xml, or ntsystem.xml? Thanks!