You have been subscribed to a public bug: After upgrading from 10.04 to 12.04 named logs no longer show up in logwatch reports. Not sure if this should be filed as a bug against rsyslog or logwatch.
There was a change to /etc/rsyslog.d/50-default.conf between 10.04 and 12.04 and a bunch of the seperate log files are now commented out and most things are only in /var/log/syslog Since the /usr/share/logwatch/default.conf/services/named.conf lists "messages" as the log file it never reports any log data. I changed my /etc/rsyslog.d/50-default.conf by uncommenting these lines (match the config in 10.04): daemon. lpr. user. mail.info mail.warn *.=debug *.=info The last one above sends most stuff to the messages file so named logs entries show up in logwatch reports after making the above changes. Part of me believes rsyslog should be considered the problem but on the other hand if rsyslog is "correct" then logwatch's named.conf needs to be overiden in dist.conf to correct for the rsyslog change. 1. Description: Ubuntu 12.04 LTS Release: 12.04 2. logwatch: Installed: 7.4.0+svn20111221rev79-1ubuntu1 Candidate: 7.4.0+svn20111221rev79-1ubuntu1 Version table: *** 7.4.0+svn20111221rev79-1ubuntu1 0 500 http://us.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages 100 /var/lib/dpkg/status bind9: Installed: 1:9.8.1.dfsg.P1-4 Candidate: 1:9.8.1.dfsg.P1-4ubuntu0.1 Version table: 1:9.8.1.dfsg.P1-4ubuntu0.1 0 500 http://us.archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages *** 1:9.8.1.dfsg.P1-4 0 500 http://us.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages 100 /var/lib/dpkg/status rsyslog: Installed: 5.8.6-1ubuntu8 Candidate: 5.8.6-1ubuntu8 Version table: *** 5.8.6-1ubuntu8 0 500 http://us.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages 100 /var/lib/dpkg/status 3. Logwatch reports/emails should contain named log information. 4. No named log information shows up in logwatch reports/emails. ** Affects: logwatch (Ubuntu) Importance: Medium Status: Confirmed -- named logs are not being reported in logwatch https://bugs.launchpad.net/bugs/1010625 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to logwatch in Ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs