/usr/share/doc/logwatch/README.Debian is in logwatch 7.4.1-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 | Sections of this file:
- Customizing the configuration
- More specific ranges
- access.log parsing - service http
- Getting fortunes in your language
- Howto modify a filter
- Logwatch runs daily for range yesterday by default
Customizing the configuration:
==============================
Please read the documentation in
/usr/share/doc/logwatch/HOWTO-Customize-LogWatch.gz.
For modifying a filter also read the last section in this file.
More specific ranges:
====================
Logwatch's range parameter supports a lot of range options if you apt-get
install libdate-manip-perl (Date::Manip in Perl terms). Type
logwatch --range Help
for more information.
access.log parsing - service http:
==================================
Since 6.1.2, there is a new format for specifying the logfile format.
I could only test it for apache2. If it doesn't work for your webserver,
please submit a bugreport with some LogLines.
Getting fortunes in your language
=================================
If you want to see fortunes in your favourite language, you need to pass a
valid LC_ALL setting to logwatch. If you don't use a valid (read: enabled by
dpkg-reconfigure locales) value, logwatch (perl) will complain. To pass that
setting in the automatic daily run, you need to modify
/etc/cron.daily/00logwatch
Howto modify a filter:
======================
Way #1: copy the filterscript from /usr/share/logwatch/scripts to
/etc/logwatch/scripts, preserving the hierarchy. Then modfiy it. The
disadvantage is that you will not be able to track upstream changes. Please
read more in /usr/share/doc/logwatch/HOWTO-Customize-LogWatch
Way #2: patch the source, rebuild. This might be the better option if you have
many machines to maintain.
A text that I've written for version 5.2.2 follows, explaining how to
recompile:
In Redhat, the distribution logwatch was written on, all logwatch files where
put in /etc, so the problem didn't exist (This is no longer true since 7.0). In
Debian, this is not allowed because nobody can seriously claim the filter
scripts to be configuration files.
This means that you have to:
(This is meant to be short HOWTO, just in case you've never modified the
source of a debian package before)
- download the source
$ apt-get source logwatch
- cd to source dir
$ cd logwatch-$version
- save the file you want to edit
$ cp $filetochange $filetochange.old
- make the modifications
$ $EDITOR $filetochange
- save the diff somewhere, so you can simply patch the file if a new version
comes out
$ diff -u $filetochange.old $filetochange > $someplacetostorediff
- I recommend to increment the version number
$ dch -i
you get an editor with debian/changelog. Modify the version number so it's
only slightly larger than the current debian version (e.g. 5.2.2-2 =>
5.2.2-2.0.0.1)
- build the package, eg:
$ dpkg-buildpackage -rfakeroot
or
$ debuild
-install the package
$ debi
or
$ dpkg -i ../logwatch_$version.deb
Logwatch runs daily for range yesterday by default
==================================================
This is for people who install packages without reading their description.
Additional information (that's obviously not in the description): If you don't
want that, simply delete /etc/cron.daily/00logwatch or modify it.
New versions of this package will preserve this change, thanks to dpkg's
configuration file handling.
|