File: http://svn.grimore.org/configuration-templates/monit/debian/templates/rsyslog -

###########################################################################
##  Copyright (C) Wizardry and Steamworks 2017 - License: GNU GPLv3      ##
###########################################################################
 
check process rsyslogd matching rsyslogd
   group system
   group rsyslogd
   depend on rsyslogd_bin
   depend on rsyslogd_rc
   depend on rsyslog_file
   start program = "/etc/init.d/rsyslog start"
   stop  program = "/etc/init.d/rsyslog stop"
   #if 5 restarts with 5 cycles then timeout
 
check file rsyslogd_bin with path /usr/sbin/rsyslogd
   group rsyslogd
   include /etc/monit/templates/rootbin
 
check file rsyslogd_rc with path "/etc/init.d/rsyslog"
   group rsyslogd
   include /etc/monit/templates/rootbin
 
check file rsyslog_file with path /var/log/messages
   group rsyslogd
   ## This may not work for idle machines.
   # if timestamp > 65 minutes then alert
   if failed permission 640 then alert
   if failed uid root then alert
   if failed gid adm then alert