Logwatch

Posted 8 years ago - updated 7 years ago logging sysadmin

Installing

yum install -y logwatch

Configuration

Default logwatch config is in /usr/share/logwatch/default.conf/logwatch.conf. Edit any overrides at /etc/logwatch/conf/

Configuration Options

Email

MailTo = admin@rennetti.com // who the reports are to
MailFrom = Logwatch //who the reports are from

Send to a file

Output  = file
Format = Html 

Report detail

Detail = High | Med | Low

Report format

Output = html

 Range

Range = yesterday | All | Today | Yesterday

Services

Service = All | sendmail | http | sudo

For a full list of services /usr/share/logwatch/scripts/services

Cron

/etc/cron.daily/0logwatch

Running manually

logwatch --detail Low --mailto email@address --service all --range today
    logwatch --service php --detail High --range All --debug High

What services does Logwatch run

Check /usr/share/logwatch/scripts

Sending to a file

logwatch --output file --filename /home/martinhearn/logwatch/$(date +%Y%m%d)-logwatch.html

more man