Hi
Using monit 5.1.1 and 5.2.2 on solaris
Monitrc snippit
check file auth.log with path /var/log/auth.log
if match "locking account" then alert
We are currently alerting on locking of specific account and have tested the behaviour of changing alert to unmonitor.
Alert sends only the most recent notices but unmonitor resends all matches in the file to the alert email. Is this by design?
regards
James