yes...you should be able to do this natively. Lok at the analysis.cfg man page for xymon.
=G=
From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Mike Burger [user-cc5c6e80f4c5@xymon.invalid]
Sent: Wednesday, January 09, 2013 3:50 PM
To: xymon at xymon.com
Subject: [Xymon] Log/file monitoring based on occurrence?
I've got a situation at work where we're being tasked with monitoring
failed logins. We've got logging and audit file creation in place...what
I'm looking for is whether or not there's a way to have Xymon monitor
those logs/files to look for X entries/occurrences within Y amount of
time.
The requirement is to try to do as much as this programatically as
possible without having to resort to scripting or other measures that may
be easily countered by a system admin.
Thanks.
--
Mike Burger
http://www.bubbanfriends.org
"It's always suicide-mission this, save-the-planet that. No one ever just
stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1