filter low timeThreshold LogWatch