Logwatch is a Perl-based log management tool for analyzing, summarizing, and reporting on a server’s log files. It is most often used to send a short digest of server’s log activity to a system administrator.

What are log files? Logs are application-generated files useful for tracking down and understanding what has happened in the past.

• These instructions are intended specifically for installing the Logwatch on Ubuntu 12.04 LTS.
• I’ll be working from a Liquid Web Core Managed Ubuntu 12.04 LTS server, and I’ll be logged in as root.

First, you’ll follow a simple best practice: ensuring the list of available packages is up to date before installing anything new.

apt-get -y update

Then let’s install Logwatch and any required packages:

apt-get -y install logwatch

During the install process you may be prompted to configure Postfix:

Go over the options, and then select OK.

Then, you’ll have to select a mail option:

In this case we are going to configure Postfix to send mail locally only; we’ll select the Local only option, and then select OK to continue.

Next we’ll configure the mail name:

Typically the mail name will be the hostname of the server on which you’re installing Logwatch; select Ok to finish the installation.

Local Configuration Options can be added in:

/etc/logwatch/conf/logwatch.conf

Default Configuration Options can be found in:

/usr/share/logwatch/default.conf/logwatch.conf

It is best practice to leave the Default Configuration as is, and edit the Local Configuration option, which is under /etc as listed above.

Be Sociable, Share!

•