I'm using version 7.4.3 and i have created /etc/logwatch/conf/logfiles/http.conf with the following line:
LogFile = /opt/web/WEBLOGS/*access_log
which matches our virtual host log files. But the output of logwatch is not parsing these files at all, because i see things like "0.00 MB transferred in 4 responses" in the httpd section, but there are hundreds of responses among the log files. (the 4 responses in this case are coming from the /var/log/httpd/ssl_access_log). So i don't understand what i did wrong. How do i get logwatch to analyze these additional logfiles?
Thanks
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Unfortunately logwatch converts everything in the config files to lower case, so WEBLOGS becomes weblogs. This needs to get fixed, but not sure how big of a task this is.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I'm using version 7.4.3 and i have created /etc/logwatch/conf/logfiles/http.conf with the following line:
LogFile = /opt/web/WEBLOGS/*access_log
which matches our virtual host log files. But the output of logwatch is not parsing these files at all, because i see things like "0.00 MB transferred in 4 responses" in the httpd section, but there are hundreds of responses among the log files. (the 4 responses in this case are coming from the /var/log/httpd/ssl_access_log). So i don't understand what i did wrong. How do i get logwatch to analyze these additional logfiles?
Thanks
Unfortunately logwatch converts everything in the config files to lower case, so WEBLOGS becomes weblogs. This needs to get fixed, but not sure how big of a task this is.
I think you can retain the upper/mixed case if you delimit the value in double quotes:
LogFile = "/opt/web/WEBLOGS/*access_log"
I agree it needs a better solution, but I think it is deeply baked into both the code and existing configurations, so I don't think it is an easy fix.