[Logwatch] logwatch for central logserver

ANDREA STEINER darkdeceit0375 at msn.com
Fri Aug 7 13:18:36 MST 2009


I beleive --splithosts is not a even valid command in the version you are using. Did you try the hostformat option? You are running the same version I am, so it should exist.

For example...

logwatch --hostformat split --range today 



From: chantal at antenna.nl
To: darkdeceit0375 at msn.com
Subject: Re: [Logwatch] logwatch for central logserver
Date: Wed, 5 Aug 2009 09:38:29 +0200
CC: logwatch at public.kaybee.org



Hi, 


I could not find the option --hostformat, I tried --splithosts but that doesn't give me any more information. Only output about the logserver itself.



On Thursday 30 July 2009 22:01:12 ANDREA STEINER wrote:

> I just recently got logwatch up and working for a similar task, but in

> my case I'm not interested in mail, so things could be different.

>

>

>

> Have you tried --hostformat split so you can see the hosts  separated out,

> instead of all in one report?

>

>

>

> The main difference between what I used, and what you have is that all

> of my log files are in the same place and I explicitly listed each one.

> I wouldn't think that would make a difference, but I'm pretty new to

> logwatch myself.

>

>

>

> Andrea

>

> From: chantal at antenna.nl

> To: logwatch at public.kaybee.org

> Date: Wed, 29 Jul 2009 15:24:26 +0200

> Subject: [Logwatch] logwatch for central logserver

>

>

>

> Hi list,

>

>

> i want to analyze the logfiles of several hosts on a central logging server

> with logwatch, but so far no succes.

>

>

> the logfiles are in  /var/log/HOSTS/<hostname>

>

>

> here's what i did:

>

>

> edit  /usr/share/logwatch/default.conf/logfiles/maillog.conf and change

> this:

>

>

> LogFile = maillog

>

> LogFile = syslog

>

> LogFile = mail.log

>

> LogFile = mail.log.0

>

> LogFile = /var/log/HOSTS/*/mail.log

>

>

> but I only see the maillog analysis for the central logging host itself.

>

>

> I use ubuntu 8.04, logwatch 7.3.6

>

>

> any hints?

>

>

> thanks, regards Chantal


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www2.list.logwatch.org:81/pipermail/logwatch/attachments/20090807/f9949d2b/attachment.html>


More information about the Logwatch mailing list