yes...you should be able to do this natively. Lok at the analysis.cfg man page for xymon.
=G=
From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Mike Burger [mburger at bubbanfriends.org] Sent: Wednesday, January 09, 2013 3:50 PM To: xymon at xymon.com Subject: [Xymon] Log/file monitoring based on occurrence?
I've got a situation at work where we're being tasked with monitoring failed logins. We've got logging and audit file creation in place...what I'm looking for is whether or not there's a way to have Xymon monitor those logs/files to look for X entries/occurrences within Y amount of time.
The requirement is to try to do as much as this programatically as possible without having to resort to scripting or other measures that may be easily countered by a system admin.
Thanks.
Mike Burger http://www.bubbanfriends.org
"It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon