About Logwatch

  • http://www.logwatch.org/
    Logwatch is a customizable log analysis system. Logwatch parses through your system's logs for a given period of time and creates a report analyzing areas that you specify, in as much detail as you require. Logwatch is easy to use and will work right out of the package on most systems.

Links

Install

# cd /usr/local/src
# wget ftp://ftp.kaybee.org/pub/linux/logwatch-7.3.6.tar.gz
# tar zxf logwatch-7.3.6.tar.gz
# cd logwatch-7.3.6
# sh install_logwatch.sh
Enter the path to the Logwatch BaseDir [/usr/share/logwatch] : 
Enter the path for the Logwatch ConfigDir [/etc/logwatch] : 
Enter the dir name to be used for temp files [/var/cache/logwatch] : 
Enter the location of perl [/usr/bin/perl] : /usr/local/bin/perl
Enter the dir name to used for the manpage [/usr/share/man] : 
# cp conf/logwatch.conf /etc/logwatch/conf/

--Setting
[/etc/logwatch/conf/logwatch.conf]
MailTo = root@xxxxx.xxx
Print = No
Detail = 10

Memo

[conf]
/usr/share/logwatch/default.conf/services
/usr/share/logwatch/default.conf/logfiles
--Add virtual domain(Aapche) log
# vi /usr/share/logwatch/default.conf/logfiles/http.conf
LogFile = /fullpath/access_*.log