Bug 56191 - logwatch is too noisy
Summary: logwatch is too noisy
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: logwatch (Show other bugs)
(Show other bugs)
Version: 7.2
Hardware: All Linux
Target Milestone: ---
Assignee: Elliot Lee
QA Contact:
Depends On:
TreeView+ depends on / blocked
Reported: 2001-11-13 19:25 UTC by Michal Jaegermann
Modified: 2008-05-01 15:38 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2001-11-13 19:26:53 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
patch to kill empty reports from logwatch (2.21 KB, patch)
2001-11-13 19:26 UTC, Michal Jaegermann
no flags Details | Diff

External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2002:053 normal SHIPPED_LIVE : Race conditions in logwatch 2002-03-28 05:00:00 UTC
Red Hat Product Errata RHSA-2002:054 normal SHIPPED_LIVE : Race conditions in logwatch 2002-03-28 05:00:00 UTC

Description Michal Jaegermann 2001-11-13 19:25:44 UTC
Description of Problem:
'logwatch.pl' script has a nasty habit of writing empty reports when
there is nothing to report.  This is actually a security issue because
after short while recipients stop paying attention to a constant noise
from logwatch or it gets turned off.

Attached patch can be used to address that particular problem.
If, for some reasons, empty reports are desirable in some situations
then an initial value of a variable '$printing' can be made overridable
on a command line and/or in configuration.

'logwatch' in general reports too many "regular" events ('sendmail'
activities, which can be a great PITA on a machine which handles
reasonable amounts of mail, or regular logins via ssh) and is not
that easy, appearances in /etc/log.d/ to the contrary, to shut it up
but this patch can be at least some beginning.

Comment 1 Michal Jaegermann 2001-11-13 19:26:48 UTC
Created attachment 37443 [details]
patch to kill empty reports from logwatch

Comment 2 Elliot Lee 2001-11-13 19:34:06 UTC
I agree that logwatch is too noisy, but fixes like this that change the basic
output of the program probably should just go upstream to the author
<kirk@kaybee.org> and we will need to pick them up at some point.

Note You need to log in before you can comment on or make changes to this bug.