Either way, I like having the flexibility. There is a little chicken/egg issue though with the second example in that there's no place for connection logging prior to the plugin getting loaded.
I like this rather a lot, because it would make it very easy for me to set up adaptive logging (higher log level for DENY's than for OK's). I don't see a chicken/egg thing if you include a default logging plugin which is loaded only if no other logging plugin is loaded.
John
