We're trying to monitor our logs, and would like to be alerted in case of repeated occurrence of a certain field ( ie PY1011 ). We'd like the script to be run every half hour, which will scan the log file, look out for repeated of any user, if the occurrence is above a threshold value, a alert should be sent immediately. The script we're looking should be designed in perl , as we cannot utilized grep or awk for this. If i had an option to utilize these utilities, i would have written up a shell script. This script would be run on a window box, where we have perl module installed.
Here is one of the line from the log file, i have bolden field, that should be scanned for repeated occurence. The value "PY1011" is not certain, as it will change.
20100217 11:05:18 0da0fbd0 <EDMV:NOTES> From MV Modify <uid=[B]PY1011[/B],ou=Internal,ou=people,dc=eis,dc=example,dc=com>
Please help me with this.