I see that I can only use configuration file in oreder to create rule. I would like to use show output.

Example:

I would like to check ntp sinhronization using command "sh ntp status". I can check ntp part of configuration but "sh ntp status" is better way.

Thanks