Imagine that have some logs like this
Jun2012|16:52:39|10.0.0.1|log|keyinst||daemon|inbound|VPN-1 & FireWall-1|Certificate initialized| Jun2012|17:52:39|1