You can trigger an alert, Copy the log and write a rule to monitor within monit like the Suricata example of the docs