Hello Gabriel, it does not work, see https://mmonit.com/monit/documentation/monit.html#SERVICE-POLL-TIME
The (not) every rule (disables) enables the monitoring for a given time interval. You disable the file check for a hour, but monit knows the last checked line and restart the check at this line. > check file ssh_logins with path /var/log/messages > not every "* 14 * * *" > if match "Accepted keyboard-interactive/pam" then alert Sorry, Lutz
