CentOS - Sep 2015 - CentOS-6 - LogWatch

The Logwatch imapd service script distributed with CentOS-6 does not
generate anything when I run logwatch --service all on a cyrus-imapd
host.  Is this expected behaviour?  Is there a separate script for
cyrus-imapd or are their configuration options required to get the
existing script to work.

I have found an ancient (2004) logwatch service script for cyrus-imapd
but I was sort of hoping that there was a more up-to-date and
officially supported version available somewhere.

Is there?


-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

On Mon, 2015-09-14 at 14:51 -0400, James B. Byrne wrote:
> The Logwatch imapd service script distributed with CentOS-6 does not
> generate anything when I run logwatch --service all on a cyrus-imapd
> host.  Is this expected behaviour?  Is there a separate script for
> cyrus-imapd or are their configuration options required to get the
> existing script to work.
1. Check there is data in the log file(s).

2. Ensure Logwatch has the correct location and names of your log files.

Check:  /usr/share/logwatch/default.conf/logfiles/ - there should be a
'imapd' file there. I don't use imapd and there is no such file on
my
instances of C6.

Using my /usr/share/logwatch/default.conf/logfiles/exim.conf as an
example (I don't use any of these entries):-
> # Which logfile group...
> LogFile = exim/main.log
> LogFile = exim/mainlog
> LogFile = exim4/mainlog
> Archive = exim/main.log.*
> Archive = archiv/exim/main.log.*
> Archive = exim/mainlog.*
> Archive = exim4/mainlog.*
> Archive = exim/main.log-*
> Archive = archiv/exim/main.log-*
> Archive = exim/mainlog-*
> Archive = exim4/mainlog-*
User changes should be in: /etc/logwatch/conf/logfiles

My /etc/logwatch/conf/logfiles/eximlog.conf has:-
> # Server 4
> # This is : /etc/logwatch/conf/logfiles/eximlog.conf
> # Referenced by : /etc/logwatch/conf/services/exim.conf
> 
> LogFile = exim/m4.main
> Archive = /data/logs.old/exim/m4.main.*

3. The name I use 'eximlog.conf' is defined
in /etc/logwatch/conf/services/exim.conf


4. Check for a script in: /usr/share/logwatch/scripts/services/imapd

5. Put modifications (whole replacement scripts)
in /etc/logwatch/scripts/services/imapd


6. You can then test Logwatch by logging-on to the server and typing

	logwatch --print --service imapd  --range today

The range can also be: yesterday or even '-21 days' (with apostrophes)

The problem with log watch is far too many names identical or almost
identical.

Good Luck.


-- 
Regards,

Paul.
England, EU.      England's place is in the European Union.