[CentOS] logwatch customization question

Sun Apr 9 13:42:43 UTC 2017
Richard <lists-centos at listmail.innovate.net>

> Date: Sunday, April 09, 2017 08:36:17 -0400
> From: Robert Moskowitz <rgm at htt-consult.com>
> Logwatch is installed, and I am assuming by how empty /etc/logwatch
> is that it is running from defaults, which I find in
> /usr/share/logwatch/default.conf/services
> I want to customize ONE service.  dovecot.
> Do I copy /usr/share/logwatch/default.conf/services/dovecot.conf
> to
> /etc/logwatch/conf/services
> and edit it there,
> or do I have to copy ALL default.conf/services/* there and modify
> /etc/logwatch/conf/logwatch.conf to look there?
> The README is rather not helpful on this.
> How do I modify ONE service (and not just make the changes in
> default.conf that I have seen in a couple howtos.

I think that the HOWTO, referenced in the logwatch man page, has a
fairly complete explanation of approaches to customization.


     The directory /usr/share/doc/logwatch-* contains several
     files with additional documentation:
         Documents the directory structure of Logwatch
         configuration and executable files,  and describes how
         to customize Logwatch by overriding these default files.


In addition to the HOWTO, as in -6, there's also a logwatch.conf man
page, which includes:

   override.conf - ( /etc/logwatch/conf/override.conf ) contains
   the settings which overrides the standard configuration of
   specific log files or services. The syntax is the same as in
   log/service files.