My scenario is that I'm analyzing the same set of log files from many different machines. As I discover known issues, id like to create a library of known problems that will auto highlight or annotate or show in a report after logs are imported and parsed. I think I can get partway there with rules but I feel like that's not part of the intended purpose. Hopefully this makes sense, I'm happy to elaborate further.