REPOST: process filter question

[Kelly Brown]

I'm going to try again.  Just incase the person that can really help me 
missed this one 8)

Hello all:

I'm trying to set up a process filter to notify me when I have an httpd
process that's been running for over an hour.

This is what I get when I try to run it:

sudo cfagent -q -f /etc/cfengine/cf.config
cf:cfengine::/etc/cfengine/cf.config:196: Insufficient or incomplete
processes statement


Here's the syntax in the config...

###########################################################################

filters:

  # When used will collect processes that have between 1 and 5 hours
cputime.
  { runawayhttpfilter

     FromTTime:   "accumulated(0,0,0,1,0,0)"
     ToTTime:     "accumulated(0,0,0,5,0,0)"
     Result:      "TTime"

  }

########################################################################

processes:

  "httpd" filter=runawayhttpfilter action=warn

########################################################################


What am I doing wrong?  Can't seem to find too much documentation on
this sort of thing so I figured I would ask here.  Thanks!

-K