On Mon, 2015-09-14 at 14:51 -0400, James B. Byrne wrote:

The Logwatch imapd service script distributed with CentOS-6 does not generate anything when I run logwatch --service all on a cyrus-imapd host. Is this expected behaviour? Is there a separate script for cyrus-imapd or are their configuration options required to get the existing script to work.

1. Check there is data in the log file(s).

2. Ensure Logwatch has the correct location and names of your log files.

Check: /usr/share/logwatch/default.conf/logfiles/ - there should be a 'imapd' file there. I don't use imapd and there is no such file on my instances of C6.

Using my /usr/share/logwatch/default.conf/logfiles/exim.conf as an example (I don't use any of these entries):-

# Which logfile group... LogFile = exim/main.log LogFile = exim/mainlog LogFile = exim4/mainlog Archive = exim/main.log.* Archive = archiv/exim/main.log.* Archive = exim/mainlog.* Archive = exim4/mainlog.* Archive = exim/main.log-* Archive = archiv/exim/main.log-* Archive = exim/mainlog-* Archive = exim4/mainlog-*

User changes should be in: /etc/logwatch/conf/logfiles

My /etc/logwatch/conf/logfiles/eximlog.conf has:-

# Server 4 # This is : /etc/logwatch/conf/logfiles/eximlog.conf # Referenced by : /etc/logwatch/conf/services/exim.conf

LogFile = exim/m4.main Archive = /data/logs.old/exim/m4.main.*

3. The name I use 'eximlog.conf' is defined in /etc/logwatch/conf/services/exim.conf

4. Check for a script in: /usr/share/logwatch/scripts/services/imapd

5. Put modifications (whole replacement scripts) in /etc/logwatch/scripts/services/imapd

6. You can then test Logwatch by logging-on to the server and typing

logwatch --print --service imapd --range today

The range can also be: yesterday or even '-21 days' (with apostrophes)

The problem with log watch is far too many names identical or almost identical.

Good Luck.