File content testing

[Keith]

I am trying to implement an action using:
http://mmonit.com/monit/documentation/monit.html#file_content_testing

check file syslog with path /var/log/syslog
if match
     "blah" then
      stop program  = "/usr/local/sbin/blah stop"
      start program = "/usr/local/sbin/blah start"


And the syntax is failing monit.

How do I do an action besides alert?

Thanks!