[CentOS] logwatch customization question

[Richard]

> Date: Sunday, April 09, 2017 08:36:17 -0400
> From: Robert Moskowitz <rgm at htt-consult.com>
>
> Logwatch is installed, and I am assuming by how empty /etc/logwatch
> is that it is running from defaults, which I find in
> /usr/share/logwatch/default.conf/services
> 
> I want to customize ONE service.  dovecot.
> 
> Do I copy /usr/share/logwatch/default.conf/services/dovecot.conf
> 
> to
> 
> /etc/logwatch/conf/services
> 
> and edit it there,
> 
> or do I have to copy ALL default.conf/services/* there and modify
> /etc/logwatch/conf/logwatch.conf to look there?
> 
> The README is rather not helpful on this.
> 
> How do I modify ONE service (and not just make the changes in
> default.conf that I have seen in a couple howtos.
> 

I think that the HOWTO, referenced in the logwatch man page, has a
fairly complete explanation of approaches to customization.


centos-6/logwatch-7.3.6

   MORE INFORMATION
     The directory /usr/share/doc/logwatch-* contains several
     files with additional documentation:
       HOWTO-Customize-LogWatch
         Documents the directory structure of Logwatch
         configuration and executable files,  and describes how
         to customize Logwatch by overriding these default files.


centos-7/logwatch-7.4.0

In addition to the HOWTO, as in -6, there's also a logwatch.conf man
page, which includes:

   override.conf - ( /etc/logwatch/conf/override.conf ) contains
   the settings which overrides the standard configuration of
   specific log files or services. The syntax is the same as in
   log/service files.