Tuesday, April 26, 2016

Logwatch weekly reports

I realy like Logwatch [1] for analyzing server log entries, however having an email from each host every morning could be an issue when hosts > 10. So I found a way to tell logwatch "analyze the logs for the past week" thanks to the Perl module for date manipulation [2][3].

I posted the logwatch.conf on Github [4] and I have tested it on the following distros:
  • Debian 6 squeeze, 7 wheezy and 8 jessie
  • Ubuntu 12.04 LTS precise and 14.04 LTS trusty
  • CentOS 6 and 7
References:


  1. https://sourceforge.net/projects/logwatch/
  2. http://logwatch.org/pipermail/logwatch/2007-October/001584.html
  3. http://primozverdnik.com/2011/05/logwatch-once-a-week-is-enough/
  4. https://gist.github.com/tonejito/530dff2904fa05304da6b825130f428d

Cheers!
--
 = ^ . ^ =