syntax for log monitoring with spaces?