Have you checked for the second copy of the logwatch.conf file? Look in your /etc/logwatch/conf folder to see if another copy exists that might be overriding your modifications. If not, then try changing 'Service = All' to 'Service = ' as has already been suggested. This should clear any settings that may already be present and make yours the only options set.
from the documentation: > To remove all previous declarations of that variable, set the variable to > the empty string. On Fri, Oct 25, 2019 at 1:20 PM Rich Shepard <[email protected]> wrote: > On Wed, 23 Oct 2019, Reid wrote: > > > Try running `/usr/sbin/logwatch --debug High` to see the full service > list > > and each config file line that's being read in. > > >> So, I changed the logwatch.conf file to read: > >> > >> Service = All > > The above should have shown that line commented out. Now it's been > removed > completely yet /usr/sbin/logwatch still complains that it's there. > > >> Service = cron > >> Service = kernel > >> Service = postfix > >> Service = sshd > >> Service = syslogd > >> Service = xntpd > >> Service = zz-disk_space > >> Service = zz-fortune > >> Service = zz-lm_sensors > > Notice: > > > On Thu, 24 Oct 2019, wes wrote: > [SP] <number> R)epl A)ccept I)nsert L)ookup U)ncap Q)uit e(X)it or ? for > help > IW /tmp/pico.92330 (Modified)(mail) Row > 25 Col 1 1:19 Ctrl-K H for help > On Wed, 23 Oct 2019, Reid wrote: > > > Try running `/usr/sbin/logwatch --debug High` to see the full service > list > > and each config file line that's being read in. > > >> So, I changed the logwatch.conf file to read: > >> > >> Service = All > > The above should have shown that line commented out. Now it's been > removed > completely yet /usr/sbin/logwatch still complains that it's there. > > >> Service = cron > >> Service = kernel > >> Service = postfix > >> Service = sshd > >> Service = syslogd > >> Service = xntpd > >> Service = zz-disk_space > >> Service = zz-fortune > >> Service = zz-lm_sensors > > Note: > > $ grep All logwatch.conf > # All these options are the defaults if you run logwatch with no > # All log-files are assumed to be given relative to this directory. > # 'Yesterday' or 'Today'... it is probably best used with Range = All > # The current choices are All, Today, Yesterday > # /usr/share/logwatch/scripts/services/*) or 'All'. The default service(s) > # to report on. This should be left as All for most people. > # most people. Setting 'Service' to 'All' above analyzes all LogFiles > > And, when I run /usr/sbin/logwatch: > > $ su -c '/usr/sbin/logwatch' > Password: > Wrong configuration entry for "Service", if "All" selected, only "-" items > are allowed > > Help! > > Rich > _______________________________________________ > PLUG mailing list > [email protected] > http://lists.pdxlinux.org/mailman/listinfo/plug > _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
