Alerting if a log file has not been written to.

[sbyrd98]

How do I throw an alert if a log file has NOT been written to within a certain amount of time? Say within 10 minutes.

[martin_mueller · Accepted solution]

You run a search over a ten minute time range for that source and raise an alert if it comes up empty.