Introduction
Adjustments to the logwatch service allow for the customization of the reports that it generates as well as where it sends the messages.
Below is how you make the basic changes to change the notification email address and what services to include or not include in its checks.
Procedure
In the file located /etc/logwatch/conf/logwatch.conf
To change the notification email address look for the line labeled
MailTo = root
and change it to the email address or user you wish the notices to goto.
If you wish to adjust which log entries are limited you will want to adjust the following line
Service =
and add any services you do NOT want to be monitored with a "-" in front of them.
Service = "-clamd"
Please note that there should be a Service = All before this, for most users you will want to leave this alone.
For more information on what entries logwatch monitors for and for what can be disabled, please look in the following folder location
/usr/share/logwatch/scripts/services/