Hey,
I think this may have gotten lost in a separate thread. Reading the man page for alerts.cfg, there are a few keywords that you can use to configure alerts...in the hosts.cfg man page you can add a tag for CLASS that is only for logs...
CLASS:Classname Force the host to belong to a specific class. Class-names are used when configuring log-file monitoring (they can be used as references in *client-local.cfg <http://xymon.com/xymon/help/manpages/man5/client-local.cfg.5.html>(5)* and *analysis.cfg <http://xymon.com/xymon/help/manpages/man5/analysis.cfg.5.html>(5)* to group log file checks). Normally, class-names are controlled on the client by starting the Xymon client with the "--class=Classname" option. If you specify it in the hosts.cfg file on the Xymon server, it overrides any class name that the client reports.
It would be handy to allow alerts.cfg to trigger on this as well. Not sure what this would entail but would be very useful.
thx
=G=