Red Hat Bugzilla – Bug 56191
logwatch is too noisy
Last modified: 2008-05-01 11:38:01 EDT
Description of Problem:
'logwatch.pl' script has a nasty habit of writing empty reports when
there is nothing to report. This is actually a security issue because
after short while recipients stop paying attention to a constant noise
from logwatch or it gets turned off.
Attached patch can be used to address that particular problem.
If, for some reasons, empty reports are desirable in some situations
then an initial value of a variable '$printing' can be made overridable
on a command line and/or in configuration.
'logwatch' in general reports too many "regular" events ('sendmail'
activities, which can be a great PITA on a machine which handles
reasonable amounts of mail, or regular logins via ssh) and is not
that easy, appearances in /etc/log.d/ to the contrary, to shut it up
but this patch can be at least some beginning.
Created attachment 37443 [details]
patch to kill empty reports from logwatch
I agree that logwatch is too noisy, but fixes like this that change the basic
output of the program probably should just go upstream to the author
<email@example.com> and we will need to pick them up at some point.