> Date: Sunday, April 09, 2017 08:36:17 -0400 > From: Robert Moskowitz <rgm at htt-consult.com> > > Logwatch is installed, and I am assuming by how empty /etc/logwatch > is that it is running from defaults, which I find in > /usr/share/logwatch/default.conf/services > > I want to customize ONE service. dovecot. > > Do I copy /usr/share/logwatch/default.conf/services/dovecot.conf > > to > > /etc/logwatch/conf/services > > and edit it there, > > or do I have to copy ALL default.conf/services/* there and modify > /etc/logwatch/conf/logwatch.conf to look there? > > The README is rather not helpful on this. > > How do I modify ONE service (and not just make the changes in > default.conf that I have seen in a couple howtos. > I think that the HOWTO, referenced in the logwatch man page, has a fairly complete explanation of approaches to customization. centos-6/logwatch-7.3.6 MORE INFORMATION The directory /usr/share/doc/logwatch-* contains several files with additional documentation: HOWTO-Customize-LogWatch Documents the directory structure of Logwatch configuration and executable files, and describes how to customize Logwatch by overriding these default files. centos-7/logwatch-7.4.0 In addition to the HOWTO, as in -6, there's also a logwatch.conf man page, which includes: override.conf - ( /etc/logwatch/conf/override.conf ) contains the settings which overrides the standard configuration of specific log files or services. The syntax is the same as in log/service files.