Server Administration

[Disable Logwatch On Other Servers]

logwatch is system log analyzer and reporter. It will go through your logs for a given period of time and make a report in the areas that you wish with the detail that you wish.

Logwatch is being used for Linux and many types of UNIX. Logwatch will separate entries by hostname, if you set SplitHosts to yes. Make sure the option MultiEmail is set to no in order to send a single e-mail message.

You need to edit the /etc/logwatch/conf/logwatch.conf file on the central log server. Edit the file using vi text editor,

enter:

# vi /etc/logwatch/conf/logwatch.conf


Update / add settings as follows:

SplitHosts = yes
HostLimit = no
MultiEmail = no

Disable Logwatch On Other Servers

you have a central logserver which has been configured to report on logs received from all systems. You need to disable logwatch cron job on on all other boxes:

# mv /etc/cron.daily/0logwatch /path/to/backup

Alternatively, you can simply remove the logwatch package:

# rpm -e logwatch

Thanks!