I am wondering if I can receive an alert when a process or a unix socket appears. I can't figure out how to get an alert when the process appears. I know this is a strange requirement but we can't figure out why a certain process gets started. While we debug I would like to be alerted so I can kill it when it happens. Any ideas how I would do this check?
Everything I tried alerts only when the process ends. I know it is not right but conceptually it would be something like
check process matching "/usr/local/bin/numSeriesAnalysisd" alert address@hidden only on { exist }