I'm curious how this might be working for you if you use the SNMP TRAPS from Corner Bowl Log Manager.
i have never heard about this product before... but i am going to now i am going to!
i was looking at Splunk but the price point for this is 10 times better! and it seems more functional!!!
We've purchased it for all server logs and now about to consider it to cover all network devices too.
I want to use it's SNMP TRAPS (Microsoft originated) to send to Orion.
The good thing is history retention with MySQL, Microsoft SQL or Oracle and it's being done mostly for Audit/Compliance issues.