Re: How to watch file content tests for several events in the same cycle?

[Tino Hendricks]

Marcus,

my suggestion as usual pleas for use of a script, because I don’t think monit 
can do what you need out of the box.

Something like 

if [[ $((`tail -3 /var/log/log_to_watch | grep CRITICAL | wc -l`)) -gt 1 ]] ; 
then …

might be a way to go?

Take care

Tino

> Am 26.09.2019 um 11:11 schrieb Marcus Mülbüsch <address@hidden>:
> 
> Hello all,
> 
> the following lines alert me if the logfiles contains 2 Criticals in 2 
> minutes and ignores single Crits:
> 
>> check file log_to_watch with path /var/log/log_to_watch
>>  if match "CRITICAL" for 2 times within 2 cycles then alert
> 
> However, my Crits mostly happen in the same second. I can safely ignore a 
> single one, but want monit to alert me if several happen at once (or in short 
> succession). The above lines does not do that.
> 
> Unfortunately I can't figure out how to proceed. Is there a way?
> 
> Any suggestion would be highly appreciated.
> 
> Marcus
>