Re: Monit sends email after “sheduled downtime ” but shouldnt

Hello Gabriel,
it does not work, see
https://mmonit.com/monit/documentation/monit.html#SERVICE-POLL-TIME

The (not) every rule (disables) enables the monitoring for a given time
interval. You disable the file check for a hour, but monit knows the
last checked line and restart the check at this line.

> check file ssh_logins with path /var/log/messages
> not every "* 14 * * *" 
> if match "Accepted keyboard-interactive/pam" then alert 

Sorry,
Lutz