I have a logwatch trigger defined which sends notification when a regex is matched.

Trigger:

{scg_logging:log[/var/log/10.4.190.16/syslog,heartbeat\ missed]. count( 600 ) }

>1

Action:
(attached)

The notification i get:

Logwatch - Match unsuccessful on SCG (Logserver lxlp01-bplmh): Status is PROBLEM

Last value was:
Apr 2 15:36:55 10.4.190.16 tr069d:[daemon.notice] tr069d[321]: 1238686615.875107 processRequest: F70E4C09 unsuccessful (code = 5)

---

Logwatch - Match unsuccessful on SCG (Logserver lxlp01-bplmh): Status is OK

Last value was:
Apr 3 00:50:50 10.4.190.16 tr069d:[daemon.notice] tr069d[321]: 1238719850.883314 processRequest: 72383045 unsuccessful (code = 5)

The last shouldnt be OK but also PROBLEM. This fudges notification messages and renders notification system useless!