Thursday, 12 September 2013

How to configure logwatch on a central log server

Linux Configure Logwatch on the Central Log Server:-
Step #1: Configuration Logwatch On The Central Log Server

Main Configuration file for logwatch located at /etc/logwatch/conf/logwatch.conf

You need to edit the /etc/logwatch/conf/logwatch.conf file on the central log server. Edit the file using vi text editor, enter:

# vi /etc/logwatch/conf/logwatch.conf

Update / add settings as follows:

SplitHosts = yes
HostLimit = no
MultiEmail = no

Step # 2: Disable Logwatch On Other Servers

Now you've a central logserver which has been configured to report on logs received from all systems. You need to disable logwatch cron job on on all other boxes:

# mv /etc/cron.daily/0logwatch /path/to/backup

Alternatively, you can simply remove the logwatch package:
# rpm -e logwatch

No comments:

Post a Comment