Marcus, my suggestion as usual pleas for use of a script, because I don’t think monit can do what you need out of the box.
Something like if [[ $((`tail -3 /var/log/log_to_watch | grep CRITICAL | wc -l`)) -gt 1 ]] ; then … might be a way to go? Take care Tino > Am 26.09.2019 um 11:11 schrieb Marcus Mülbüsch > <[email protected]>: > > Hello all, > > the following lines alert me if the logfiles contains 2 Criticals in 2 > minutes and ignores single Crits: > >> check file log_to_watch with path /var/log/log_to_watch >> if match "CRITICAL" for 2 times within 2 cycles then alert > > However, my Crits mostly happen in the same second. I can safely ignore a > single one, but want monit to alert me if several happen at once (or in short > succession). The above lines does not do that. > > Unfortunately I can't figure out how to proceed. Is there a way? > > Any suggestion would be highly appreciated. > > Marcus >
