...except, Andrew, that logcheck won't do what he's wanting to do. The "view log files" panel in the server manager would, if he were able to boot a network-capable system. The command line, via mc or other means, certainly would. From the description of the RPM you mentioned (and also from my memory of it), it e-mails you periodically of security-related log entries.