Logwatch v7.3.6 doesn't appear to obey the following:
If an executable script is declared in an /etc/logwatch/conf file, all of the executable script declarations in the corresponding file in /usr/share/logwatch/default.conf or /usr/share/logwatch/dist.conf are ignored.
I ran into this while trying to modify the fail2ban configuration. Setting an executable in the corresponding logfiles/ file doesn't remove previously defined ones. This makes overriding values from default.conf impossible without editing the core files, which is not desirable.
I do not know if this is an issue in the current versions of logwatch. If it is not, a reference to the commit that fixes this would be great.
Indeed, I do think there is a problem. Sometimes it works, and sometimes it doesn't. Try the attached patch for logwatch.pl, and let us know if it works.
This appears to have fixed the issue, thank you!
Changes in /etc/logwatch/conf/{logfiles,services} override as expected. Changes in override.conf also take effect as expected.
Thanks. Commited: rev227