thanks, yes help with the vbscript as I have not done this is syslog at all!
And i did originally have it set for 240 (mins) but had no hits at all on it at all, 60 works but with limitations mentioned.
any help appreciated - step by step tho for this sql bod!