Well, now I know how linecount works. I was hoping that it would let me track the number of lines in a file and spot changes over time. But this is not what line count is for -- it is intended to match some arbitrary subset of lines in a file, and then this is tracked via RRD as a "derived" value, meaning what is graphed is how the count changes over time, scaled into units per second. This is perfect if you want to watch the rate of login failures on your system, but not very useful for what I wanted.
So I will monitor changes in file size (which might show me changes), but cannot readily translate this into a line count.
So, an enhancement request -- add a "line count" as a file parameter, in addition to all the normal things that are available now?
GLH