thorko . de

Logwatch 7.4.0 Howto

Download logwatch and extract it.
The default configuration is in etc/conf/logwatch.conf

# log directory on your server usually /var/log
LogDir = /var/log
# output format can be html, text
Format = html
# the destination mail address
MailTo = root
# the source mail address ex: logwatch@domain.com
MailFrom = logwatch@domain.com
# use also archives such as .1, .gz files
Archive = No
# time range to analyze logs for
Range = Today
Detail = High
Service = All
Service = "-zz-network"
Service = "-sudo"
Service = "-clamav"

The ignore.conf file contains regular expressions which will be skipped when parsing log files

In the services directory you can specify per log file settings. For example create a dovecot.conf file

Title = "Dovecot"
Logfile = dovecot
*OnlyService = (imap-login|dovecot)

In the logfiles directory you can specify log files which don't reside in the default location.

Logwatch doesn't work perfectly with dovecot because of the log format. I've created a patch which works with dovecot 2.0.15.

2011-12-21 8:14 pm