We run a centralized syslog server, and separate all syslogged avc into a separate log file. Is it possible to have setroubleshooter/sealert use this log file ? -jf