diff --git a/xymon/sample.messages/files.alert b/xymon/sample.messages/files.alert
new file mode 100644
index 0000000..2a4ccd9
--- /dev/null
+++ b/xymon/sample.messages/files.alert
@@ -0,0 +1,41 @@
+BBCOLORLEVEL="yellow"
+BBALPHAMSG="HOST.DOMAIN.ORG:files yellow [275849]
+yellow Thu Oct 10 11:17:18 CEST 2019 - Files NOT ok
+
+&yellow <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=file:/var/log/cron.log">/var/log/cron.log</a>
+File was modified 4642 seconds ago - should be <3800
+
+&yellow <a href="/xymon-cgi/svcstatus.sh?CLIENT=vmgit.101010.virtual&amp;SECTION=file:/tmp/.github.TEST.upgrade">/tmp/.github.TEST.upgrade</a>
+File exists
+
+&green <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=logfile:/var/log/kern.log">/var/log/kern.log</a>
+
+&green <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=file:/var/log/messages">/var/log/messages</a>
+
+&green <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=file:/var/log/syslog">/var/log/syslog</a>
+
+&green <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=dir:/var/log">/var/log</a>
+
+&green <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=dir:/tmp/">/tmp/</a>
+
+&green <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=file:/bin/su">/bin/su</a>
+
+&green <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=file:/usr/bin/sudo">/usr/bin/sudo</a>
+
+&green <a href="/xymon-cgi/svcstatus.sh?CLIENT=HOST.DOMAIN.ORG&amp;SECTION=file:/var/log/installer">/var/log/installer</a>
+
+
+See http://localhost/xymon-cgi/svcstatus.sh?HOST=HOST.DOMAIN.ORG&SERVICE=files
+"
+ACKCODE="275849"
+RCPT="1234567890"
+BBHOSTNAME="HOST.DOMAIN.ORG"
+MACHIP="037187001062"
+BBSVCNAME="files"
+BBSVCNUM="0"
+BBHOSTSVC="HOST.DOMAIN.ORG.files"
+BBHOSTSVCCOMMAS="HOST,DOMAIN.ORG.files"
+BBNUMERIC="000037187001062275849"
+RECOVERED="0"
+DOWNSECS="603"
+DOWNSECSMSG=""