Bug 56191
| Summary: | logwatch is too noisy | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Retired] Red Hat Linux | Reporter: | Michal Jaegermann <michal> | ||||
| Component: | logwatch | Assignee: | Elliot Lee <sopwith> | ||||
| Status: | CLOSED WONTFIX | QA Contact: | |||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 7.2 | ||||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2001-11-13 19:26:53 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
Created attachment 37443 [details]
patch to kill empty reports from logwatch
I agree that logwatch is too noisy, but fixes like this that change the basic output of the program probably should just go upstream to the author <kirk> and we will need to pick them up at some point. |
Description of Problem: 'logwatch.pl' script has a nasty habit of writing empty reports when there is nothing to report. This is actually a security issue because after short while recipients stop paying attention to a constant noise from logwatch or it gets turned off. Attached patch can be used to address that particular problem. If, for some reasons, empty reports are desirable in some situations then an initial value of a variable '$printing' can be made overridable on a command line and/or in configuration. 'logwatch' in general reports too many "regular" events ('sendmail' activities, which can be a great PITA on a machine which handles reasonable amounts of mail, or regular logins via ssh) and is not that easy, appearances in /etc/log.d/ to the contrary, to shut it up but this patch can be at least some beginning.