$Config{'splithosts'} = 1; I have the above in /etc/cron.daily/00-logwatch and have the logs from multiple machines ending up in syslog on a machine named "mg******". The machine named "fl******" gets it's log entry processed first which means that the title of the email is "LogWatch for fl******" instead of "LogWatch for mg******". It seems to me that a more appropriate email title when splithosts is used would be "LogWatch run on $Config{'hostname'}". I believe that the correct solution to this problem would involve having $hostname refer to the host that is being processed and $Config{'hostname'} refer to the machine that is running the logwatch.
Created attachment 135106 [details] patch to fix this bug This patch works for me on RHEL4.4. Let me know if it would help if I wrote and tested a patch for rawhide.
Putting on the proposed list.
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux maintenance release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux Update release for currently deployed products. This request is not yet committed for inclusion in an Update release.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2008-0750.html