this is obsolete doc -- see http://doc.nethence.com/ instead

Daily mail reports with logwatch 

 

http://pbraun.nethence.com/doc/sysutils_linux/redhat.html 

http://pbraun.nethence.com/doc/sysutils_linux/redhat_packages.html 

http://pbraun.nethence.com/doc/sysutils_linux/logwatch.html 

http://pbraun.nethence.com/doc/sysutils/log_rotation.html 

 

 

Basic configuration 

Configure logwatch, 

cd /usr/share/logwatch/default.conf
mv logwatch.conf logwatch.conf.dist
sed '/^$/d; /^#/d;' logwatch.conf.dist > logwatch.conf

change/comment, 

Detail = High
#Service = "-zz-network"     # Prevents execution of zz-network service
#Service = "-zz-sys"         # Prevents execution of zz-sys service

Note. we prefer to edit the defaults instead if local configs (/etc/logwatch/conf/logwatch.conf) as we couldn't comment some services on the latter. 

Note. those perl modules are required to get CPU and mem info, 

perl -MCPAN -e 'install Sys::CPU'
perl -MCPAN -e 'install Sys::MemInfo'

 

 

HTML output and template 

Note Redhat RHEL 5.1 logwatch is broken about that. Use RHEL 5.2's logwatch package or superior. 

 

Change logwatch reports's output to html, 

vi /etc/cron.daily/0logwatch

change, 

$Config{'output'} = "html";

Note. that cron is a symlink to "/usr/share/logwatch/scripts/logwatch.pl" 

 

Edit the template, 

cd /usr/share/logwatch/default.conf/html
mv header.html header.html.dist
vi header.html

like, 

<html>
<head>
 <style type="text/css">
        *  { font-size:10px; font-family:Arial,Verdana }
        td { border:0 }
        h1 { font-size: 150%; margin-bottom:0; padding-bottom:0 }
        h2 { font-size:135%; margin-bottom:0; padding-bottom:0 }
        h3 { font-size:120%; margin-bottom:0; padding-bottom:0 }
 </style>
</head>
<body>
<!-- End header.html -->

note. no espaces in from of doublequotes here, despide the default html code 

note. we don't need title no h1, the hostname will appear in message's subjet anyway 

and, 

mv footer.html footer.html.dist
vi footer.html

like, 

<!-- Start footer.html -->
</body>
</html>

 

You'll also want to fix table borders, 

vi /etc/cron.daily/0logwatch

change this line, 

<table border=\"1\">\n";

to, 

<table>\n";