The filtering script would completely suppress additional alerts though, correct? I still want to see every matched string because they will contain unique information, but if two of them occur in the same log file back-to-back, I'd like it grouped into a single email.
I will have to do testing with the DCI checking log file modification time and see if that works for me.
