[monit] using "if match"

[Nick Upson]

by config file entry is below, first of all can anyone tell me a
better way to write it as there are several more entries and it's
likely to get longer.

secondly there are several entries in the monit log (running with -v)
that seem wrong
see log extract below.

thirdly these logs are rotated using logrotate called from
cron.hourly, is there a way I can integrate that into monit & avoid
the window of logfile entry being written but the file is rotated
before monit can check it

# looking for interesting messages
check file bs1log with path /var/log/unb/bs1.log
    if match "ERROR" then
        alert
    if match "pointer" then
        alert
    if match "corruption" then
        alert

[GMT Feb 22 11:15:02] debug    : 'bs1log' file existence check passed
[GMT Feb 22 11:15:02] debug    : 'bs1log' is regular file
[GMT Feb 22 11:15:02] debug    : FILE: Regular expression "ERROR" does
not match on content line
[GMT Feb 22 11:15:02] error    : 'bs1log' content match [test pointer
this is additional]

# why is this an error?

[GMT Feb 22 11:15:02] debug    : Regex match notification is sent to
address@hidden
[GMT Feb 22 11:15:02] error    : Aborting event

# why? what event?

[GMT Feb 22 11:15:02] debug    : FILE: Regular expression "pointer"
DOES match on content line

# why does this appear after doing the alert that it causes

[GMT Feb 22 11:15:02] debug    : FILE: Regular expression "corruption"
does not match on content line