[CentOS] Need some help with logwatch.

Fri Oct 23 18:47:43 UTC 2009
Andrew Hull <list at racc2000.com>

James B. Byrne wrote:
> host1 crontab -l as root
> 
> 45 7 * * * /usr/sbin/logwatch --service http --service imapd
> --service pop3 --service sshd --service vsftpd --service
> zz-disk_space --service zz-network --service zz-sys --mailto
> support at harte-lyne.ca
> 
> host2 crontab -l as root
> 
> 45 7 * * * /usr/sbin/logwatch --service http --service imapd
> --service pop3 --service sshd --service vsftpd --service
> zz-disk_space -- service zz-network --service zz-sys --mailto
> support at harte-lyne.ca   #Logwatch summary
> 

Hello,
I'm afraid I cannot address your specific question, however this may 
still be helpful...

I recommend moving all of those command line switches from your crontab 
into the config file(s).

The defaults are defined in /usr/share/logwatch/default.conf/logwatch.conf

The logwatch maintainers intend users to override those defaults in 
/etc/logwatch/conf/logwatch.conf

If you move your customizations to /etc/logwatch/conf/logwatch.conf, 
then you can call logwatch without any switches at all.

Also, something I do and find useful is to leave delivery of the 
logwatch emails set to the default - root at localhost. Then forward root's 
mail to my external system at domain account. This way I get any/all system 
generated e-mail to root (like an mdadm failed array event!), not just 
logwatch.

Hope that helps,
Andy Hull