On CentOS5 with the latest updates applied, the logwatch filter for postfix returns way too many lines from the log. I get an "unmatched entries" message and all messages that have gone through the system is listed.
Here is an example:
8F930A8092: to=morten@foo.bar, orig_to=morten@localhost, relay=local, delay=0.19, delays=0.06/0.01/0/0.12, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail)
I have tried to look at the logwatch config and some google hits on similar problems but on debian. The hints there does not match what is relevant for CentOS.
Anyone seen this problem on CentOS or is it some specific problem to my configuration? I use fetchmail/postfix/dovecot/procmail locally on the server to consolidate mail. Could be that it tries to filter on some hostname/domain name?
On Tue, Oct 02, 2007 at 12:41:28PM +0200, Morten Torstensen wrote:
On CentOS5 with the latest updates applied, the logwatch filter for postfix returns way too many lines from the log. I get an "unmatched entries" message and all messages that have gone through the system is listed.
Yeah. My fix was to copy the services/postfix file in to /etc/logwatch/scripts/services/postfix and edit the file.
The big issue is that postfix changed it's log format so the logwatch entries didn't match. I think the main change I made was to change all versions of "delay" to read delay=-?[0-9.]+,.*
Here is a diff that seems to work for me
begin 644 pf.fix M*BHJ("]U<W(O<VAA<F4O;&]G=V%T8V@O<V-R:7!T<R]S97)V:6-E<R]P;W-T M9FEX"5-A="!*86X@(#8@,#DZ,#@Z,C(@,C`P-PHM+2T@+V5T8R]L;V=W871C M:"]S8W)I<'1S+W-E<G9I8V5S+W!O<W1F:7@)1G)I($%U9R`S,2`R,3HQ-#HP M,B`R,#`W"BHJ*BHJ*BHJ*BHJ*BHJ*@HJ*BH@,38T+#$W,"`J*BHJ"B`@("`@ M("`@*"`D5&AI<TQI;F4@/7X@;2]>6V$M>D$M6C`M.5TK.B!C;&EE;G0]*%M> M(%TJ7%M;7B!=*EQ=*5QS*B0O("D@;W(@"B`@("`@("`@*"`D5&AI<TQI;F4@ M/7X@;2]>6V$M>D$M6C`M.5TK.B!M97-S86=E+6ED+R`I(&]R"B`@("`@("`@ M*"`D5&AI<TQI;F4@/7X@;2]>6V$M>D$M6C`M.5TK.B!S:VEP<&5D+"!S=&EL M;"!B96EN9R!D96QI=F5R960O("D@;W(*(2`@("`@("`H("14:&ES3&EN92`] M?B!M+UY;82UZ02U:,"TY72LZ('1O/5P+BH^+"!R96QA>3TN*BP@9&5L87D] M6S`M.5TK+"!S=&%T=7,]*'-E;G1\9&5F97)R960I+R`I(&]R"B`@("`@("`@ M*"`D5&AI<TQI;F4@/7X@;2]>6V$M>D$M6C`M.5TK.B!H;W-T(%M>(%TJ7%M; M7B!=*EQ=('-A:60Z(#1;,"TY75LP+3E=+R`I(&]R"B`@("`@("`@*"`D5&AI M<TQI;F4@/7X@;2]>6V$M>D$M6C`M.5TK.B!H;W-T(%M>(%TJ7%M;7B!=*EQ= M(')E9G5S960@=&@=&%L:R!T;R!M93H@-%LP+3E=6S`M.5TO("D@;W(*("`@ M("`@("`H("14:&ES3&EN92`]?B!M+UY$96QE=&5D.B!<9"!M97-S86=E)"@ M*2!O<@HM+2T@,38T+#$W,"`M+2TM"B`@("`@("`@*"`D5&AI<TQI;F4@/7X@ M;2]>6V$M>D$M6C`M.5TK.B!C;&EE;G0]*%M>(%TJ7%M;7B!=*EQ=*5QS*B0O M("D@;W(@"B`@("`@("`@*"`D5&AI<TQI;F4@/7X@;2]>6V$M>D$M6C`M.5TK M.B!M97-S86=E+6ED+R`I(&]R"B`@("`@("`@*"`D5&AI<TQI;F4@/7X@;2]> M6V$M>D$M6C`M.5TK.B!S:VEP<&5D+"!S=&EL;"!B96EN9R!D96QI=F5R960O M("D@;W(*(2`@("`@("`H("14:&ES3&EN92`]?B!M+UY;82UZ02U:,"TY72LZ M('1O/5P+BH^+"!R96QA>3TN*BP@9&5L87D]6S`M.5PN72LL+BH@<W1A='5S M/2AS96YT?&1E9F5R<F5D*2@*2!O<@H@("`@("`@("@@)%1H:7-,:6YE(#U^ M(&TO7EMA+7I!+5HP+3E=*SH@:&]S="!;7B!=*EQ;6UX@72I<72!S86ED.B`T M6S`M.5U;,"TY72@*2!O<@H@("`@("`@("@@)%1H:7-,:6YE(#U^(&TO7EMA M+7I!+5HP+3E=*SH@:&]S="!;7B!=*EQ;6UX@72I<72!R969U<V5D('1O('1A M;&L@=&@;64Z(#1;,"TY75LP+3E=+R`I(&]R"B`@("`@("`@*"`D5&AI<TQI M;F4@/7X@;2]>1&5L971E9#H@7&0@;65S<V%G920O("D@;W(**BHJ*BHJ*BHJ M*BHJ*BHJ"BHJ*B`R,3(L,C$X("HJ*BH*("`@("!](&5L<VEF("@@*"1">71E M<RD@/2`H)%1H:7-,:6YE(#U^("]>6V$M>D$M6C`M.5TK.B!F<F]M/2XJ<VEZ M93TH6S`M.5TK*2XJ)"\I("D@>PH@("`@("`@("1-<V=S4V5N="LK.PH@("`@ M("`@("1">71E<U1R86YS9F5R<F5D("L]("1">71E<SL*(2`@("!](&5L<VEF M("@H)%5S97(I(#T@*"14:&ES3&EN92`]?B`O7EMA+7I!+5HP+3E=*SH@=&] M7#PH6UX@72HI/BPH/SH@;W)I9U]T;SU</"@_.EM>(%TJ*3XL*3@<F5L87D] M;&]C86PL(&1E;&%Y/2T_6S`M.5TK+"!S=&%T=7,]8F]U;F-E9"!<*"@_.G5N M:VYO=VX@=7-E<GQU<V5R('5N:VYO=VXI+RDI('L*("`@("`@("`C('5N:VYO M=VX@=7-E<@H@("`@("`@("15;FMN;W=N57-E<G-[)%5S97)]*RL["B`@("`@ M?2!E;'-I9B`H*"15<V5R*2`]("@D5&AI<TQI;F4@/7X@+UY;82UZ02U:,"TY M72LZ(')E:F5C=#H@4D-05"!F<F]M("@_.EM>(%TJ*3H@6S`M.5TK(#PH6UX@ M72HI/CHH/SI;7CI=*SH@*3]5<V5R('5N:VYO=VX@:6XH/SH@7'<K*2L@=&%B M;&4O*2D@>PHM+2T@,C$R+#(Q."`M+2TM"B`@("`@?2!E;'-I9B`H("@D0GET M97,I(#T@*"14:&ES3&EN92`]?B`O7EMA+7I!+5HP+3E=*SH@9G)O;3TN*G-I M>F4]*%LP+3E=*RDN*B0O*2`I('L*("`@("`@("`D37-G<U-E;G0K*SL*("`@ M("`@("`D0GET97-4<F%N<V9E<G)E9"`K/2`D0GET97,["B$@("`@?2!E;'-I M9B`H*"15<V5R*2`]("@D5&AI<TQI;F4@/7X@+UY;82UZ02U:,"TY72LZ('1O M/5P*%M>(%TJ*3XL*#\Z(&]R:6=?=&]7#PH/SI;7B!=*BD^+"D_(')E;&%Y M/6QO8V%L+"!D96QA>3TM/ULP+3E<+ETK+"XJ('-T871U<SUB;W5N8V5D(%PH M*#\Z=6YK;F]W;B!U<V5R?'5S97(@=6YK;F]W;BDO*2D@>PH@("`@("`@(",@ M=6YK;F]W;B!U<V5R"B`@("`@("`@)%5N:VYO=VY5<V5R<WLD57-E<GTK*SL* M("`@("!](&5L<VEF("@H)%5S97(I(#T@*"14:&ES3&EN92`]?B`O7EMA+7I! M+5HP+3E=*SH@<F5J96-T.B!20U!4(&9R;VT@*#\Z6UX@72HI.B!;,"TY72L@ M/"A;7B!=*BD^.B@_.EM>.ETK.B`I/U5S97(@=6YK;F]W;B!I;B@_.B!<=RLI M*R!T86)L92\I*2!["BHJ*BHJ*BHJ*BHJ*BHJ*@HJ*BH@,C(Q+#(R-R`J*BHJ M"B`@("`@?2!E;'-I9B`H*"15<V5R*2`]("@D5&AI<TQI;F4@/7X@+UY;82UZ M02U:,"TY72LZ('1O/5P*%M>(%TJ*3XL*#\Z(&]R:6=?=&]7#PH/SI;7B!= M*BD^+"D_("XJ+"!S=&%T=7,]8F]U;F-E9"`N*CH@57-E<B!U;FMN;W=N(&EN M('9I<G1U86P@*&%L:6%S?&UA:6QB;W@I('1A8FQE+RDI('L*("`@("`@("`C M(&%N;W1H97(@=6YK;F]W;B!U<V5R('!R;V)A8FQY(&-O=6QD(&-O;6)I;F4@ M=VET:"!L;V-A;"!U;FMN;W=N(&)U="!A9V%I;B!M>2!P97)L(&ES('=E86L* M("`@("`@("`D56YK;F]W;E5S97)S>R15<V5R?2LK.PHA("`@('T@96QS:68@ M*"@D1&5S="P@)%)E;&%Y+"`D37-G*2`]("@D5&AI<TQI;F4@/7X@+UY;82UZ M02U:,"TY72LZ('1O/5P*%M>(%TJ*3XL*#\Z(&]R:6=?=&]7#PH/SI;7B!= M*BD^+"D_(')E;&%Y/2A;7B!=*BDN*BP@9&5L87D]+3];,"TY72LL('-T871U M<SUB;W5N8V5D(%PH*%M>*5TJ*2@*2D@>PH@("`@("`@(",@=6YK;F]W;B!U M<V5R"B`@("`@("`@(R`D37-G(#T@(B!H96QL;R`B"B`@("`@("`@(R!P<FEN M="`B8F]U;F-E(&UE<W-A9V4@9G)O;2`B("X@)$1E<W0@+B`B(&US9R`Z("(@ M+B`D4F5L87D@+B`B7&XB.PHM+2T@,C(Q+#(R-R`M+2TM"B`@("`@?2!E;'-I M9B`H*"15<V5R*2`]("@D5&AI<TQI;F4@/7X@+UY;82UZ02U:,"TY72LZ('1O M/5P*%M>(%TJ*3XL*#\Z(&]R:6=?=&]7#PH/SI;7B!=*BD^+"D_("XJ+"!S M=&%T=7,]8F]U;F-E9"`N*CH@57-E<B!U;FMN;W=N(&EN('9I<G1U86P@*&%L M:6%S?&UA:6QB;W@I('1A8FQE+RDI('L*("`@("`@("`C(&%N;W1H97(@=6YK M;F]W;B!U<V5R('!R;V)A8FQY(&-O=6QD(&-O;6)I;F4@=VET:"!L;V-A;"!U M;FMN;W=N(&)U="!A9V%I;B!M>2!P97)L(&ES('=E86L*("`@("`@("`D56YK M;F]W;E5S97)S>R15<V5R?2LK.PHA("`@('T@96QS:68@*"@D1&5S="P@)%)E M;&%Y+"`D37-G*2`]("@D5&AI<TQI;F4@/7X@+UY;82UZ02U:,"TY72LZ('1O M/5P*%M>(%TJ*3XL*#\Z(&]R:6=?=&]7#PH/SI;7B!=*BD^+"D_(')E;&%Y M/2A;7B!=*BDN*BP@9&5L87D]+3];,"TY7"Y=*RPN*B!S=&%T=7,]8F]U;F-E M9"!<*"A;7BE=*BDO("DI('L*("`@("`@("`C('5N:VYO=VX@=7-E<@H@("`@ M("`@(",@)$US9R`]("(@:&5L;&@(@H@("`@("`@(",@<')I;G0@(F)O=6YC M92!M97-S86=E(&9R;VT@(B`N("1$97-T("X@(B!M<V<@.B`B("X@)%)E;&%Y M("X@(EQN(CL**BHJ*BHJ*BHJ*BHJ*BHJ"BHJ*B`R,S(L,C,X("HJ*BH*("`@ M("`@("`@("`D5&5M<"`](")4;R`B("X@)$1E<W0@+B`B($US9SU<(B(@+B`D M37-G("X@(EPB(CL*("`@("`@("`@("`D1F]R96EG;D)O=6YC97LD5&5M<'TK M*SL*("`@("`@("!]"B$@("`@?2!E;'-I9B`H("@D4F5L87DL)$1E<W0I(#T@ M*"14:&ES3&EN92`]?B!M+W)E:F5C=#H@4D-05"!F<F]M("A;7B!=*BDZ(%LP M+3E=*R`*%M>(%TJ*3XN*B!296QA>2!A8V-E<W,@9&5N:65D+BH@=&]*%M> M(%TJ*2\I("D@>PH@("`@("`@(",@<')I;G0@(G)E:F5C=#H@(B`N("14:&ES M3&EN92`N(")<;B(["B`@("`@("`@(R!P<FEN="`B4F5L87D@.B(@+B`D4F5L M87D@+B`B('1O("(@+B`D1&5S="`N(")<;B(["B`@("`@("`@)%1E;7`@/2`B M1G)O;2`B("X@)%)E;&%Y("X@(B!T;R`B("X@)$1E<W0["BTM+2`R,S(L,C,X M("TM+2T*("`@("`@("`@("`D5&5M<"`](")4;R`B("X@)$1E<W0@+B`B($US M9SU<(B(@+B`D37-G("X@(EPB(CL*("`@("`@("`@("`D1F]R96EG;D)O=6YC M97LD5&5M<'TK*SL*("`@("`@("!]"B$@("`@?2!E;'-I9B`H("@D4F5L87DL M)$1E<W0I(#T@*"14:&ES3&EN92`]?B!M+W)E:F5C=#H@4D-05"!F<F]M("A; M7B!=*BDZ(%LP+3E<+B!=*R`*%M>(%TJ*3XN*B!296QA>2!A8V-E<W,@9&5N M:65D+BH@=&]*%M>(%TJ*2\I("D@>PH@("`@("`@(",@<')I;G0@(G)E:F5C M=#H@(B`N("14:&ES3&EN92`N(")<;B(["B`@("`@("`@(R!P<FEN="`B4F5L M87D@.B(@+B`D4F5L87D@+B`B('1O("(@+B`D1&5S="`N(")<;B(["B`@("`@ M("`@)%1E;7`@/2`B1G)O;2`B("X@)%)E;&%Y("X@(B!T;R`B("X@)$1E<W0[ M"BHJ*BHJ*BHJ*BHJ*BHJ*@HJ*BH@,C8U+#(W-"`J*BHJ"B`@("`@("`@)$AE M861E<E=A<FYI;F=[(E5N:VYO=VX@4F5A<V]N(GU[)%=A<FYI;F=]*RL["B`@ M("`@?2!E;'-I9B`H("@D4F5J96-T960L=6YD968L=6YD968L=6YD968L)%)E M87-O;BD@/2`H)%1H:7-,:6YE(#U^("]>6V$M>D$M6C`M.5TK.B!R96IE8W0Z M(&)O9'D@*"XJ*3L@9G)O;3T*%M>(%TJ*3X@=&]/"A;7B!=*BD^*"!P<F]T M;SU;7B!=*B!H96QO/3Q;7B!=*CXI/SH@*"XJ*20O*2D@>PH@("`@("`@("1" M;V1Y4F5J96-T>R1296%S;VY]>R1296IE8W1E9'TK*SL*(2`@("!](&5L<VEF M("@@*'5N9&5F+'5N9&5F+'5N9&5F+"1296%S;VXI(#T@*"14:&ES3&EN92`] M?B`O7EMA+7I!+5HP+3E=*SH@=&]/"A;7B!=*BD^+"@@;W)I9U]T;ST\6UX@ M72H^+"D_(')E;&%Y/2A;7B!=*BDL(&1E;&%Y/5QD*RP@<W1A='5S/75N9&5L M:79E<F%B;&4@7"@H+BHI7"DD+RDI('L*("`@("`@("`D56YD96QI=F5R86)L M92LK.PH@("`@("`@("15;F1E;&EV97)A8FQE37-G>R1296%S;VY]*RL["B$@ M("`@?2!E;'-I9B`H("AU;F1E9BQU;F1E9BQU;F1E9BQU;F1E9BD@/2`H)%1H M:7-,:6YE(#U^("]>6V$M>D$M6C`M.5TK.B!T;ST*%M>(%TJ*3XL*"!O<FEG M7W1O/3Q;7B!=*CXL*3@<F5L87D]*%M>(%TJ*2P@9&5L87D]7&0K+"!S=&%T M=7,]9&5L:79E<F%B;&4@7"@H+BHI7"DD+RDI('L*("`@("`@("`D1&5L:79E M<F%B;&4K*SL*("`@("`C?2!E;'-I9B`H("@D2&]S="QU;F1E9BD@/2`H)%1H M:7-,:6YE(#U^("]R96IE8W0Z(%)#4%0@9G)O;2`H6UX@72I<6UM>(%TJ7%TI M.B!;,"TY72L@/"A;7B!=*BD^.B!396YD97(@861D<F5S<R!R96IE8W1E9#H@ M1&]M86EN(&YO="!F;W5N9#LO*2D@>PH@("`@(",@("`D4F5J96-T1&]M86EN M>R1(;W-T?2LK.PHM+2T@,C8U+#(W-"`M+2TM"B`@("`@("`@)$AE861E<E=A M<FYI;F=[(E5N:VYO=VX@4F5A<V]N(GU[)%=A<FYI;F=]*RL["B`@("`@?2!E M;'-I9B`H("@D4F5J96-T960L=6YD968L=6YD968L=6YD968L)%)E87-O;BD@ M/2`H)%1H:7-,:6YE(#U^("]>6V$M>D$M6C`M.5TK.B!R96IE8W0Z(&)O9'D@ M*"XJ*3L@9G)O;3T*%M>(%TJ*3X@=&]/"A;7B!=*BD^*"!P<F]T;SU;7B!= M*B!H96QO/3Q;7B!=*CXI/SH@*"XJ*20O*2D@>PH@("`@("`@("1";V1Y4F5J M96-T>R1296%S;VY]>R1296IE8W1E9'TK*SL*(2`@("!](&5L<VEF("@@*'5N M9&5F+'5N9&5F+'5N9&5F+"1296%S;VXI(#T@*"14:&ES3&EN92`]?B`O7EMA M+7I!+5HP+3E=*SH@=&]/"A;7B!=*BD^+"@@;W)I9U]T;ST\6UX@72H^+"D_ M(')E;&%Y/2A;7B!=*BDL(&1E;&%Y/5LP+3E<+ETK+"XJ('-T871U<SUU;F1E M;&EV97)A8FQE(%PH*"XJ*5PI)"\I*2!["B`@("`@("`@)%5N9&5L:79E<F%B M;&4K*SL*("`@("`@("`D56YD96QI=F5R86)L94US9WLD4F5A<V]N?2LK.PHA M("`@('T@96QS:68@*"`H=6YD968L=6YD968L=6YD968L=6YD968I(#T@*"14 M:&ES3&EN92`]?B`O7EMA+7I!+5HP+3E=*SH@=&]/"A;7B!=*BD^+"@@;W)I M9U]T;ST\6UX@72H^+"D_(')E;&%Y/2A;7B!=*BDL(&1E;&%Y/5LP+3E<+ETK M+"XJ('-T871U<SUD96QI=F5R86)L92!<*"@N*BE<*20O*2D@>PH@("`@("`@ M("1$96QI=F5R86)L92LK.PH@("`@("-](&5L<VEF("@@*"1(;W-T+'5N9&5F M*2`]("@D5&AI<TQI;F4@/7X@+W)E:F5C=#H@4D-05"!F<F]M("A;7B!=*EQ; M6UX@72I<72DZ(%LP+3E=*R`*%M>(%TJ*3XZ(%-E;F1E<B!A9&1R97-S(')E M:F5C=&5D.B!$;VUA:6X@;F]T(&9O=6YD.R\I*2!["B`@("`@(R`@("1296IE M8W1$;VUA:6Y[)$AO<W1]*RL["BHJ*BHJ*BHJ*BHJ*BHJ*@HJ*BH@,C@U+#(Y M,2`J*BHJ"B`@("`@("`@)%)E:F5C=$-L:65N='LD4F5A<V]N?7LD2&]S='U[ M)%-E;F1E<GU[)%)E8VEP?2LK.PH@("`@("`@("1296IE8W1#;&EE;G1(;W-T M>R1296%S;VY]>R1(;W-T?2LK.PH@("`@("`@("1296IE8W1#;&EE;G1296%S M;VY[)%)E87-O;GTK*SL*(2`@("!](&5L<VEF("@@*"1(;W-T+"1396YD97(L M)%)E8VEP+"1(96QO*2`]("@D5&AI<TQI;F4@/7X@+W)E:F5C=#H@4D-05"!F M<F]M(%M>(%TJ7%LH6UX@72HI7%TZ(%LP+3E=*R!#;&EE;G0@:&]S="!R96IE M8W1E9#H@8V%N;F]T(&9I;F0@>6]U<B!H;W-T;F%M92P@7%M<9"M<+EQD*UPN M7&0K7"Y<9"M<73L@9G)O;3T*"XJ/RD^('1O/3PH+BH_*3X@<')O=&]7%,K M(&AE;&]/"@N*BD^+RDI('L*("`@("`@("`D4F5J96-T56YK;F]W;D-L:65N M='LD2&]S='U[)$AE;&]]>R1396YD97)]>R1296-I<'TK*SL*("`@("`@("`D M4F5J96-T56YK;F]W;D-L:65N=$AO<W1[(B1(;W-T"6AE;&]/"1(96QO/B)] M*RL["B`@("`@("`@)%)E:F5C=%5N:VYO=VY#;&EE;G1S*RL["BTM+2`R.#4L M,CDQ("TM+2T*("`@("`@("`D4F5J96-T0VQI96YT>R1296%S;VY]>R1(;W-T M?7LD4V5N9&5R?7LD4F5C:7!]*RL["B`@("`@("`@)%)E:F5C=$-L:65N=$AO M<W1[)%)E87-O;GU[)$AO<W1]*RL["B`@("`@("`@)%)E:F5C=$-L:65N=%)E M87-O;GLD4F5A<V]N?2LK.PHA("`@('T@96QS:68@*"`H)$AO<W0L)%-E;F1E M<BPD4F5C:7`L)$AE;&\I(#T@*"14:&ES3&EN92`]?B`O<F5J96-T.B!20U!4 M(&9R;VT@6UX@72I<6RA;7B!=*BE<73H@6S`M.5PN(%TK($-L:65N="!H;W-T M(')E:F5C=&5D.B!C86YN;W0@9FEN9"!Y;W5R(&AO<W1N86UE+"!<6UQD*UPN M7&0K7"Y<9"M<+EQD*UQ=.R!F<F]M/3PH+BH_*3X@=&]/"@N*C\I/B!P<F]T M;SU<4RL@:&5L;ST*"XJ*3XO*2D@>PH@("`@("`@("1296IE8W15;FMN;W=N M0VQI96YT>R1(;W-T?7LD2&5L;WU[)%-E;F1E<GU[)%)E8VEP?2LK.PH@("`@ M("`@("1296IE8W15;FMN;W=N0VQI96YT2&]S='LB)$AO<W0):&5L;ST)$AE J;&^(GTK*SL*("`@("`@("`D4F5J96-T56YK;F]W;D-L:65N=',K*SL* ` end
Stephen Harris wrote:
Yeah. My fix was to copy the services/postfix file in to /etc/logwatch/scripts/services/postfix and edit the file.
Thanks, your patch solved the problem for me. Tho all the config files are under /usr/share/logwatch on my system. There are some stubs in /etc/logwatch too, but I could not see any config entries that pointed logwatch there.
Anyway, patching /usr/share/logwatch/services/postfix with your patch fixed it.
Morten Torstensen wrote:
Anyway, patching /usr/share/logwatch/services/postfix with your patch fixed it.
/usr/share/logwatch/scripts/services/postfix of course...
On Tue, Oct 02, 2007 at 01:34:15PM +0200, Morten Torstensen wrote:
Stephen Harris wrote:
Yeah. My fix was to copy the services/postfix file in to /etc/logwatch/scripts/services/postfix and edit the file.
Thanks, your patch solved the problem for me. Tho all the config files are under /usr/share/logwatch on my system. There are some stubs in /etc/logwatch too, but I could not see any config entries that pointed logwatch there.
The /etc files override the /usr/share files. This allows you to leave the package untouched (so updates won't delete your changes).
on 10/2/2007 3:41 AM Morten Torstensen spake the following:
On CentOS5 with the latest updates applied, the logwatch filter for postfix returns way too many lines from the log. I get an "unmatched entries" message and all messages that have gone through the system is listed.
Here is an example:
8F930A8092: to=morten@foo.bar, orig_to=morten@localhost, relay=local, delay=0.19, delays=0.06/0.01/0/0.12, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail)
I have tried to look at the logwatch config and some google hits on similar problems but on debian. The hints there does not match what is relevant for CentOS.
Anyone seen this problem on CentOS or is it some specific problem to my configuration? I use fetchmail/postfix/dovecot/procmail locally on the server to consolidate mail. Could be that it tries to filter on some hostname/domain name?
Are you using the latest from www.logwatch.org (7.3.6) or the old version bundled with CentOS?
Scott Silva wrote:
Are you using the latest from www.logwatch.org (7.3.6) or the old version bundled with CentOS?
I am using the base yum repos. No time to remember to chase down a myriad of different program packages from different websites. I am sure this problem is solved in newer logwatch versions, as it is pretty obvious, but I want to keep to the base repos as much as possible.
But thanks for the tip! I got a patch for the postfix script for logwatch that works great for me.