The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Getting more out of LogWatch on a cPanel/WHM server

Discussion in 'General Discussion' started by Exa_Ankur, May 5, 2009.

  1. Exa_Ankur

    Exa_Ankur Member

    Apr 22, 2009
    Likes Received:
    Trophy Points:
    I was searching for something else the other day and came across this (search for LogWatch on the page).
    It changes the default paths for some of the log files so that they work on a cPanel/WHM server.
    This will give you more reports in your daily LogWatch email - specifically, it adds exim, apache, courier and PureFTP logs.

    Most tutorials only show you how to change the detail level or the email address in logwatch.conf.
    So, I thought I'd share this piece of information.

    I found that a few changes were necessary for my system.
    So, I'll give all the steps I followed below:

    1) After you have installed LogWatch, change the following in /usr/share/logwatch/default.conf/logwatch.conf :

    Detail = High
    MailTo = <your email address>
    You can use Detail = Med if you want to reduce the details you get.

    2) Add the following to /etc/logwatch/conf/override.conf (you may have to create the file):

    logfiles/exim: LogFile = exim_mainlog
    logfiles/http: LogFile = /usr/local/apache/logs/access_log
    services/pop3: *OnlyService = cpanelpop
    services/pop3: *RemoveHeaders = 1
    services/pureftpd: LogFile = messages
    services/pureftpd: $show_logins = 1
    services/pureftpd: $show_logouts = 1
    services/pureftpd: $show_new_connections = 1
    So, if you are not bored reading LogWatch's daily logs and would like to increase your workload, you now know how to :)
    How have you configured your LogWatch installation ? Or do you use something other than LogWatch ?

Share This Page