Index: /trunk/include/sh_log_correlate.h
===================================================================
--- /trunk/include/sh_log_correlate.h	(revision 357)
+++ /trunk/include/sh_log_correlate.h	(revision 358)
@@ -22,3 +22,7 @@
 void sh_keep_match();
 
+/* Deadtime for a correlation rule
+ */
+int sh_keep_deadtime (const char * str);
+
 #endif
Index: /trunk/src/sh_log_check.c
===================================================================
--- /trunk/src/sh_log_check.c	(revision 357)
+++ /trunk/src/sh_log_check.c	(revision 358)
@@ -1315,4 +1315,8 @@
         N_("logmonburstcron"),
         sh_repeat_set_cron,
+    },
+    {
+        N_("logmondeadtime"),
+        sh_keep_deadtime,
     },
     {
Index: /trunk/src/sh_log_correlate.c
===================================================================
--- /trunk/src/sh_log_correlate.c	(revision 357)
+++ /trunk/src/sh_log_correlate.c	(revision 358)
@@ -180,5 +180,19 @@
 
 struct sh_mkeep * mkeep_list = NULL;
-
+unsigned long     mkeep_deadtime = 60;
+
+int sh_keep_deadtime (const char * str)
+{
+  unsigned long  value;
+  char * foo;
+
+  value = (size_t) strtoul(str, &foo, 0);
+
+  if (*foo == '\0') {
+    mkeep_deadtime = value;
+    return 0;
+  }
+  return -1;
+}
 
 int sh_keep_match_add(const char * str, const char * queue, 
@@ -304,5 +318,5 @@
 
 		  if ((mkeep->reported < now) &&
-		      (60 < (now - mkeep->reported)))
+		      (mkeep_deadtime < (unsigned int)(now - mkeep->reported)))
 		    {
 		      mkeep->reported = now;