Script to log only defined keywords from /var/log/messages
#!/bin/bash
tail -fn0 /var/log/messages | while read line
do
echo $line | egrep -i "refused|invalid|error|fail|lost|shut|down|offline"
if [ $? -eq 0 ]
then
echo $line >> /tmp/filtered-messages
fi
done