Found the issue. I had used some temporary credentials when I first tested the monitor. When I switched to some new credentials it would not overwrite the logs in /tmp because they were owned by the guest account. After deleting the files, the monitor generated new temp log files and started counting correctly. thanks for your input guys. It really shed the light on things.
↧