Logwatch - Remove Parts of Report

[nurseryboy]

After installing APF, I am getting a ton of messages in my Logwatch email about dropped packets. I see that this is normal, but, these messages take up quite a bit of space in my Logwatch report. Gmail is actually clipping the email after so many lines, so I can't even read the rest of the report.

I see that you can disable logging dropped packets through APF's config. But it says that the logging is required for antidos. Any way to configure Logwatch to not report on the dropped packets? Just kind of curious. It's not hurting anything one way or another, though.

Thanks.

[cPanelBilly]

The best thing to do is to create a filter for it and put it in /etc/log.d/scripts/services

Check some of the ones in there to see how it is done.

[nurseryboy]

Ok, great. I'll take a look at what's in there.

Thank you very much.