Hello,
I use “Logwatch” for several years. However, now I have noticed that if a system HAS no errors, Logwatch doesn’t sent email. This is a bad behavior for me, because I want to check “ssh sessions” or “storage status”. Is there any configuration way to force ALWAYS to send the email?
Thanks.
Is this an always on system or a laptop that sleeps?
As root at the command line you can generate a report by:
/etc/cron.daily/0logwatch
Visit that locatioin first to confirm the file name. Read the contents of /etc/anacron to understand the times and latency that is used to initiate the scripts in /etc/cron.daily.
How have you configured the configs in /etc/logwatch/<descriptor>.conf?
On my laptop that is suspended often I don’t always get daily reports, but on my server I do.
Hi @jbkt23,
This behavior is always on systems that are running 24x7 as “servers”. For example, a server 24x7 that is include in a SLURM cluster and there aren’t directly SSH connections, doesn’t report anything, not even the “Disk Space Begin” script (that shows all storage and %use). However, if I connect with SSH to that server, next “Logwatch” is sent and shows that “SSHD Begin” connection.
Why?
Thanks.
So what happens when you run the script:
/etc/cron.daily/0logwatch
Did you look in the files I noted earlier to see how they are configured?
Have you made changes to the configurations to alter who receives log output?
Do you have a mailer daemon installed?
As root what does the “mail” command output?