check process rsyslogd with pidfile /var/run/syslogd.pid
    start program = "/bin/systemctl start rsyslog"
    stop program = "/bin/systemctl stop  rsyslog"
    if 3 restarts within 6 cycles then exec "/bin/bash -c '/usr/bin/monit unmonitor rsyslogd && /bin/sleep 3600 && /usr/bin/monit monitor rsyslogd'"

check file rsyslog_messages with path /var/log/messages
    if match 'imuxsock begins to drop messages' then exec '/srv/southbridge/check/ps-snapshot.sh'
    if match 'imuxsock begins to drop messages' for 2 cycles then exec "/bin/bash -c '/usr/bin/monit unmonitor rsyslog_messages && /bin/sleep 3600 && /usr/bin/monit monitor rsyslog_messages'"
    noalert monit@monitmail.southbridge.ru
