Description of problem: logwatch sends some false information about "newly installed packages" because there is no "year" in the log file. example log file entry (from a F7 machine): [root@host ~]# tail /var/log/yum.log Feb 20 12:50:00 Updated: wine-esd - 0.9.55-1.fc7.i386 Feb 20 12:50:01 Updated: wine-tools - 0.9.55-1.fc7.i386 Part of the logwatch email: --------------------- yum Begin ------------------------ Packages Updated: rsync.i386 2.6.9-2.fc5 ---------------------- yum End ------------------------- This information is totally wrong. I updated this package exactly one year ago. I guess most developers of Fedora are always with the newest version of Fedora and therefore update with yum very often. The logfile is therefore cleaned up very often and they never get into the situation that the information in the log file is older than a year. The solution would be to add the year to the log string. Another solution would be to change the logwatch parser so it makes more checks if the information is really new (at the end of the file)
take this to logwatch. please ask them to get the yum log information from /var/log/messages - not out of the yum.log.