How to Install Logwatch on Ubuntu 12.04 LTS

Reading Time: < 1 minute

Logwatch is a Perl-based log management tool for analyzing, summarizing, and reporting on a server’s log files. It is most often used to send a short digest of server’s log activity to a system administrator.

What are log files? Logs are application-generated files useful for tracking down and understanding what has happened in the past.

Pre-Flight Check
  • These instructions are intended specifically for installing the Logwatch on Ubuntu 12.04 LTS.
  • I’ll be working from a Liquid Web Core Managed Ubuntu 12.04 LTS server, and I’ll be logged in as root.

Step 1: Install Logwatch

First, you’ll follow a simple best practice: ensuring the list of available packages is up to date before installing anything new.

apt-get -y update

Then let’s install Logwatch and any required packages:

apt-get -y install logwatch

During the install process you may be prompted to configure Postfix:

How to Install Logwatch on Ubuntu 12.04 LTS

Go over the options, and then select OK.

Then, you’ll have to select a mail option:

How to Install Logwatch on Ubuntu 12.04 LTS

In this case we are going to configure Postfix to send mail locally only; we’ll select the Local only option, and then select OK to continue.

Next we’ll configure the mail name:

How to Install Logwatch on Ubuntu 12.04 LTS

Typically the mail name will be the hostname of the server on which you’re installing Logwatch; select Ok to finish the installation.

Step 2: Configuration File Locations

Local Configuration Options can be added in:


Default Configuration Options can be found in:


It is best practice to leave the Default Configuration as is, and edit the Local Configuration option, which is under /etc as listed above.

Refer a friend and get a $50 hosting credit!