Help me understand your question a little better. I take it you're expecting that after an error (match), the next time SiteScope reads the log there will be zero (0) lines, and you wish for it to stay in "error" status.
David, Thanks for the reply. Correct. Basically we have the log file monitor running every 10 minutes, but the log will not necessarily populate every 10 minutes, may be longer. So after an error(match) state, the next time SiteScope reads the log, it may be zero (0) lines, and therefore I wish the monitor to stay in "error" status. Thanks,
Take a look at "New Calculated Metric" form. It has the ability to retain previous values through a regular expression.
Since SiteScope thresholds deal with absolutes, using the Calculated Metric might be able to retain the value of the previous monitor run (#previous()). A threshold could be set based on the previous monitor run, and stay in error.