On Tue, Mar 15, 2016 at 11:59:30AM -0400, Stephen Paul Weber wrote: > The default /etc/monit/monitrc.d/rsyslog file has a timestamp check on > /var/log/messages, but that file does not get most log lines anymore. A > better default would be /var/log/syslog
I don't think it does make sense, you must enable immark plugin, as suggested, to avoid wrong alerts. But I'll change this.