Change logwatch notifications and monitoring.

Introduction

Adjustments to the logwatch service allow for the customization of the reports that it generates as well as where it sends the messages.

Below is how you make the basic changes to change the notification email address and what services to include or not include in its checks.

Procedure

In the file located /etc/logwatch/conf/logwatch.conf

To change the notification email  address look for the line labeled

MailTo = root

and change it to the email address or user you wish the notices to goto.

If you wish to adjust which log entries are limited you will want to adjust the following line

Service =

and add any services you do NOT want to be monitored with a "-" in front of them.

Service  = "-clamd"

Please note that there should be a Service = All before this, for most users you will want to leave this alone.

For more information on what entries logwatch monitors for and for what can be disabled, please look in the following folder location

/usr/share/logwatch/scripts/services/