Dear HolyGuacamole
Yes you are right, the component status will turn to critical/red when the component status hit the threshold.
my script just reading the latest keyword base on time stamp and display it.
so in the below example the last line will be displayed as script output since it consider as latest alarm from the log file.
02/08/2015 11:00:13 WARN : 20150209114513.417,QSFTP,0,npc-qdbftp1-pr,10.1.1.21,W001,Found No ACK File [13,13] [root:264
02/09/2015 11:00:11 WARN : 20150209110011.080,QSFTP,0,npc-qdbftp1-pr,10.1.1.21,W001,Found No ACK File [13,13] [root:264]
02/09/2015 11:30:00 WARN : 20150209110011.080,QSFTP,0,npc-qdbftp1-pr,10.1.1.21,W001,Found No ACK File [13,13] [root:264]
i would try as well to modify the script to reset the alert every 5 minutes as suggested and see