# apt-get install swatch

# Create the file /etc/swatch.conf with the following contents:

watchfor = /%LINK-3-UPDOWN/
	mail addresses=inst,subject=Link state change,throttle = 60:00
watchfor = /%LINK-5-CHANGED/
	mail addresses=inst,subject=Link state change,throttle = 60:00

***** NOTE THAT YOU SHOULD USE A BLOODY TAB AND NO "#€"€&W€% SPACES *****

# Start swatch on a test logfile:

swatch -c /etc/swatch.conf -t /var/log/network/2008/02/24/169.223.2.54-2008-02-24-11.log

# To run swatch against a logfile, instead of waiting for new messages:

swatch -c /etc/swatch.conf -f /var/log/network/2008/02/24/169.223.2.54-2008-02-24-11.log

#                          ^^^^