Hello,
We have Kiwi syslog server, and we want to monitor if some event is logging for more than 15 minutes for example.
I have created rule to filter by some words in the Message, to log it into different file and to display on different display, but I want also to be notified by email if the message is keep being logged for more than 15 minutes.
In the alarms options there is no way to monitor the events by time being logged but only to monitor the message count.