Yeah and someone wrote a splunk plugin which looked promising (was told $work was excited about it too before they went defunct or got bought - idr)