Hey LEM folks,
We've just put up a new Thwack contest you might be interested in: Rule Your Log Data Contest. Create or tweak an existing rule to do something cool, submit it to the contest, and you're entered to win. If you're not yet a LEM customer, don't fret, you can do it on the evaluation, even before you start sending your own log data to the appliance.
Once the contest is over we'll roll the content over to the Content Exchange for LEM, so we'll all benefit from the rules that get posted. We'll take a look at including some of them out of the box, too, if they look particularly useful.