On Sunday, April 19, 2015 15:46:29 Joseph L. Casale wrote: > > Can anyone point me to where my mistake is? > > First, you are creating overrides, or site specific definitions in the > platform directory. Don't do that, the distro owns and maintains this. Put > your new code in /etc/logwatch, man 8 logwatch for explanation. > > Finally, you don't show is the script that actually does the parsing. The > "service" and "log" definition represent 2 of 3 component's, you also need > to tell logwatch how to read and extract the parts of the logfile you want, > as well as the applicable severity etc... > > jlc Also watch out for selinux permissions. Logwatch does not have selinux permissions in all directories. > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos