Digging into this further there are a few different reasons why this could be occurring.
- Two ERROR strings are found during each execution, potentially as the result of constant errors. Unlikely based on the date/time stamp information shown in the screenshot you provided above.
- For example: 2 errors are written to the monitored log file every 30 minutes and time between application polls is also 30 minutes. As result we have similar errors but with different timestamps.
- For some reason files in /tmp folder are bring deleted automatically. When the script executes it can’t find previous results and as such, always returns all results.
- More than one “Number of newly found string” script with the same arguments are assigned to the same server.
- Two or more “Number of newly found string” scripts which are looking for the same file but in different locations.
If none of these are applicable to your situation then please open a case with support so we can dig into this issue further. If one of these is in fact the culprit, I'd be very curious to know which it was.