Logwatch is a tool that will monitor your server's logs and email the administrator a digest on a daily basis, and is primarily used on Linux-based distros.
Questions tagged [logwatch]
86 questions
1
vote
2 answers
Change the sender email of logwatch on RH Linux
Im running logwatch on red hat 7
it sends mails using root@localhost.localdomain
however, the email from localhost.localdomain is not received at the recipient because localhost.localdomain is not registered.
I want to change logwatch or mail to…
misamisa
- 49
- 1
- 4
- 5
1
vote
2 answers
Logwatch configured for nginx with custom log format gives empty output
Problem
I have configured logwatch (CentOS 5.8, x64) to include nginx, using this as a guideline and using the Apache and nginx documentation on log formats. The problem is, that I'm using a specific log format, being:
log_format main …
bartlaarhoven
- 206
- 2
- 7
1
vote
1 answer
Make logwatch reports more interesting?
Is it possible to improve the quality of reports from logwatch?
Like make it not just report disk usage which doesn't even change much in daily operation, but report significant changes in usage or approaching critical capacity levels?
If I cannot…
Alexander Shcheblikin
- 146
- 6
1
vote
2 answers
Collating cron output for periodic e-mails
vixie-cron e-mails me the output of cron jobs, with one message per job.
I would rather receive messages in batches, with either a configurable number of messages per batch or (better) each batch covering a defined time period. I already use…
supervacuo
- 1,433
- 2
- 11
- 10
1
vote
1 answer
Logwatch not including one host in report. Why?
As the title says, I've setup a central RHEL rsyslog server with a couple of RHEL clients forwarding all their logs to it. The logs are being forwarded correctly because when I look at the content of /var/log/* logs on the server, all the client…
Bourne
- 1,039
- 5
- 18
- 24
1
vote
2 answers
Logwatch Disk Space Usage is Wrong/Stale
I have a RHEL 5 server that recently ran out of disk space and now our Logwatch for the server reports the following disk usage (I think this is the last accurate night before the /var partition filled up):
Filesystem Size Used Avail…
Scott Keck-Warren
- 1,670
- 1
- 14
- 23
1
vote
2 answers
Logwatch: Ignore certain IPs for SSH & PAM checks?
I have a CentOS 5.6 system, which runs Logwatch.
If I perform a security scan (Nessus) against this host, it produces unnecessary noise in the Logwatch output. I'd like to run these security scans regularly, from an internal IP and an external IP,…
Stefan Lasiewski
- 23,667
- 41
- 132
- 186
1
vote
2 answers
Logwatch: domain running Google Apps mail doesn't recieve logs
Here's an odd problem. I've set up logwatch (ubuntu server) to send email to info@example.com which is running google apps email. But I'm not receiving any logwatch emails. However, if I try logwatch --mailto foobar@gmail.com at the command-line…
molidoli
- 231
- 4
- 8
1
vote
1 answer
How can I get logwatch to process alternate apache logs?
CentOS 5 | Apache 2.2.3 | LogWatch 7.3
Hello All,
I have Apache running on a CentOS box and am hosting multiple VirtualHosts. Each of these virtual hosts has a separate access log. For example:…
Mike B
- 11,871
- 42
- 107
- 168
1
vote
1 answer
Logwatch - Several Attacks? I'm Worried! What should I do?
I have a VPS and I get everyday a super crowded Logwatch.
I'm not expert about Debian so I don't know if this is normal or if I should worry.
Any opinions?
################### Logwatch 7.4.0 (03/01/11) ####################
Processing…
Gianluca Della Porta
- 13
- 2
0
votes
1 answer
Logwatch does not report on httpd (apache2)
Problem: I'm using Debian GNU/Linux 8 and my Logwatch does not have a "Begin httpd" section at all for my Apache pools.
/usr/share/logwatch/default.conf/logfiles/http.conf
is set for some custom files:
LogFile = apache2/*.log
Which I believe are…
CharlesM
- 101
- 1
0
votes
2 answers
How do I remove ^null$ errors from Logwatch?
After the site is migrated to HTTPS, ^null$-errors are displayed in Logwatch (the connection is closed until the server receives a response) for all hosts that access the site.
How can I remove this error?
In the Logwatch email report:
*.** MB…
Dmitry Maslennikov
- 101
- 5
0
votes
1 answer
How to get logwatch to filter dates in celery logs?
I'm a newbie to Logwatch and have it set up to watch log files created by celery, a distributed task queue popular in the Python world.
My logwatch.conf "Range" is set to "between yesterday 4am and today 4am” and this range filter works for other…
Ghopper21
- 113
- 10
0
votes
1 answer
Why is my logwatch conf with absolute paths LogFile entries not working?
The logwatch documentation says the LogFile command can handle absolute paths. Accordingly, I have a celery.conf file in /etc/logwatch/conf/services as follows:
Title = "Watchdog Celery worker errors"
LogFile = /var/log/208-celery.log
LogFile =…
Ghopper21
- 113
- 10
0
votes
0 answers
Logwatch httpd - Lot of probes
Recently Logwatch detects much more probes on my server than usual. Here an example of my yesterday logwatch report:
--------------------- httpd Begin ------------------------
A total of **10415** sites probed the server
95.138.82.51…
MadMass
- 1