[Logwatch] Logwatch 5.0-1 doesn't seem to like RedHat 6.2...
Mon, 17 Nov 2003 09:52:32 +0100
On Sat, 2003-11-15 at 15:29, Patrick Salsbury wrote:
> "What could be causing this bloaty goodness?", I hear you asking yourself...
This is a "problem" with the new http-service - which (as it seems)
doesn't handle older versions of apache when going through its logfiles
(access_log). I spent at couple of hours reconfiguring my http.conf for
Logwatch 5.0 to handle my own v1.3.27 installations of apache. Change
the logformat configuration in your http.conf to the following and see
if it's working for you:
$HTTP_FIELDS = "client_ip ident userid timestamp request http_rc
$HTTP_FORMAT = "space space space brace quote space space"
The "Use of initialized..." errors you'll get is because the http filter
can't correctly parse lines from the access_log http logfile.