Ivor Durham

Thanks for the suggestion. I believe I followed the instructions but "logwatch --service sshd" still produces no output even manually querying "journalctl --output=cat --unit=sshd.service --since yesterday" is showing logins. Here's what i have: /etc/logwatch/conf/logfiles/null.conf is an empty file. /etc/logwatch/conf/services/sshd.conf contains only: LogFile = LogFile = null *JournalCtl = "--output=cat --unit=sshd.service" And I made the following changes to /usr/shared/logwatch/default.conf/services/sshd.conf:...

Thanks for the suggestion. I believe I followed the instructions but "logwatch --service sshd" still produces no output even manually querying "journalctl --output=cat --unit=sshd.service --since yesterday" is showing logins. Here's what i have: /etc/logwatch/conf/logfiles/null.conf is an empty file. /etc/logwatch/conf/services/sshd.conf contains only: LogFile = LogFile = null *JournalCtl = "--output=cat --unit=sshd.service" And I made the following changes to /usr/shared/logwatch/default.conf/services/sshd.conf:...

Thanks for the suggestion. I believe I followed the instructions but "logwatch --service sshd" still produces no output even manually querying "journalctl --output=cat --unit=sshd.service --since yesterday" is showing logins. Here's what i have: /etc/logwatch/conf/logfiles/null.conf is an empty file. /etc/logwatch/conf/services/sshd.conf contains only: LogFile = LogFile = null *JournalCtl = "--output=cat --unit=sshd.service" And I made the following changes to /usr/shared/logwatch/default.conf/services/sshd.conf:...

I recently had cause to completely reinstall a Fedora 25 system. With the default logwatch installation I am no longer getting reports for services that report through systemd rather than writing their own logfiles. Looking specifically at sshd.conf and reading /usr/share/logwatch/scripts/shared/journalctl it looks like I should be able to copy /usr/shared/logwatch/default.conf/services/sshd.conf to /etc/logwatch/conf/services/sshd.conf and replace: LogFile = secure LogFile = messages with: LogFile...