Hi, folks It seems like monit overlooks some file content matches for some unknown to me reason. I think(but not sure) it only reports the "latest" file content changes during its invocation cycle and the earlier ones are omitted. By "latest" I mean the file content changes which happened just about the monit invocation.
My log file is about 1.5 mb length and it's not shrinking(well, it is logrotated but it happens once a day and monit is not reporting about some content matches during the day). My monitrc looks as follows: ============================================= set daemon 60 set mailserver localhost set logfile syslog facility log_daemon set alert moni...@localhost check file some.log with path /tmp/some.log if match "\[ERR\]" then alert if match "\[EXP\]" then alert if match "\[THR\]" then alert ============================================= I did some tests, for example I typed the following in the shell: # echo "[ERR] test1" >> /tmp/some.log # echo "[ERR] test2" >> /tmp/some.log # echo "[ERR] test3" >> /tmp/some.log # echo "[ERR] test4" >> /tmp/some.log And I got only file content changes alerts for "test1" and "test4" Maybe there is something wrong about my monitrc...any help is highly appreciated P.S. I tried to report this bug via the form[1] but I got "You're not logged in and you didn't enter the magic anti-spam number, please go back!" [1] https://savannah.nongnu.org/bugs/?func=additem&group=monit -- Best regards, Pavel -- To unsubscribe: http://lists.nongnu.org/mailman/listinfo/monit-general
