I use throttle to count, send an email when it reach the number of logs.
The problem is that i use the key %{host} and it counts all messages, because all messages came with a field "host".
I thought it counted it isolated:
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.