- alert = something that i need to know right f. now
- passive email (does not generate sound alert, etc) = something that I need to know within the next few hours
- everything else: goes right into a file that i can lookup if needed, but rarely do
- finally theres always some program generating some heavy logging activity with zero useful data in it so if its really overboard i disable it, just for the sake of grepping speed if i need to look at the archived logs.
