1LOGWATCH(8)                      User Manuals                      LOGWATCH(8)
2
3
4

NAME

6       logwatch - system log analyzer and reporter
7

SYNOPSIS

9       logwatch  [--detail level ] [--logfile log-file-group ] [--service ser‐
10       vice-name ] [--mailto address ] [--archives] [--range range ]  [--debug
11       level  ]  [--filename  file-name  ]  [--logdir directory ] [--hostlimit
12       hosts ] [--hostname hostname ]  [--html_wrap  number  of  characters  ]
13       [--hostformat  host  based  options ] [--output output-type ] [--format
14       report format ] [--encode encoding to use ] [--numeric] [--no-oldfiles-
15       log] [--version] [--help|--usage]
16

DESCRIPTION

18       Logwatch  is  a customizable, pluggable log-monitoring system.  It will
19       go through your logs for a given period of time and make  a  report  in
20       the  areas  that  you  wish with the detail that you wish.  Logwatch is
21       being used for Linux and many types of UNIX.
22

OPTIONS

24       --detail level
25              This is the detail level of the report.  level can be a positive
26              integer, or high, med, low, which correspond to the integers 10,
27              5, and 0, respectively.
28
29       --logfile log-file-group
30              This will force Logwatch to process only  the  set  of  logfiles
31              defined  by  log-file-group (i.e. messages, xferlog, ...).  Log‐
32              watch will therefore process all services that  use  those  log‐
33              files.   This  option can be specified more than once to specify
34              multiple logfile-groups.
35
36       --service service-name
37              This will force Logwatch to process only the  service  specified
38              in  service-name  (i.e. login, pam, identd, ...).  Logwatch will
39              therefore also process any log-file-groups necessary to  process
40              these  services.  This option can be specified more than once to
41              specify multiple services to process.  A useful service-name  is
42              All  which  will  process  all services (and logfile-groups) for
43              which you have filters installed.
44
45       --mailto address
46              Mail the results to the  email  address  or  user  specified  in
47              address.
48
49       --range range
50              You  can specify a date-range to process. Common ranges are Yes‐
51              terday, Today, All, and Help.   Additional  options  are  listed
52              when invoked with the Help parameter.
53
54       --archives
55              Each  log-file-group has basic logfiles (i.e. /var/log/messages)
56              as well as archives (i.e. /var/log/messages.?  or  /var/log/mes‐
57              sages.?.gz).   When  used  with  "--range all", this option will
58              make Logwatch search through the archives  in  addition  to  the
59              regular  logfiles.   For  other values of --range, Logwatch will
60              search the appropriate archived logs.
61
62       --debug level
63              For debugging purposes.  level can range from 0  to  100.   This
64              will  really clutter up your output.  You probably don't want to
65              use this.
66
67       --filename file-name
68              Save the output to file-name instead of  displaying  or  mailing
69              it.
70
71       --logdir directory
72              Look in directory for log subdirectories or log files instead of
73              the default directory.
74
75       --hostlimit host1,host2
76              Limit report to hostname - host1, host2.
77
78       --hostname hostname
79              Use hostname for the reports instead of this system's  hostname.
80              In addition, if HostLimit is set in the logwatch.conf configura‐
81              tion file (see MORE INFORMATION, below),  then  only  logs  from
82              this hostname will be processed (where appropriate).
83
84       --html_wrap num-characters
85              Number  of  characters  that  html  output should be wrapped to.
86              Default is 80.
87
88       --numeric
89              Inhibits additional name lookups, displaying IP addresses numer‐
90              ically.
91
92       --no-oldfiles-log
93              Suppress  the logwatch log, which informs about the old files in
94              logwatch tmpdir.
95
96       --usage
97              Displays usage information
98
99       --help same as --usage.
100

FILES

102       /usr/share/logwatch/
103              This directory contains all the perl executables and  configura‐
104              tion files shipped with the logwatch distribution.
105
106       /etc/logwatch
107              This  directory contains local configuration files that override
108              the default configuration.  See MORE INFORMATION below for  more
109              information.
110

EXAMPLES

112       logwatch --service ftpd-xferlog --range all --detail high --archives
113              This  will  print  out  all FTP transfers that are stored in all
114              current and archived xferlogs.
115       logwatch --service pam_pwdb --range yesterday --detail high
116              This will print out login information for the previous day...
117

MORE INFORMATION

119       The directory /usr/share/doc/logwatch-*  contains  several  files  with
120       additional documentation:
121       HOWTO-Customize-LogWatch
122              Documents  the directory structure of Logwatch configuration and
123              executable files, and describes how  to  customize  Logwatch  by
124              overriding these default files.
125       LICENSE
126              Describes  the  License  under  which  Logwatch  is distributed.
127              Additional clauses may be specified in individual files.
128       README
129              Describes how to install, where to find it, mailing  lists,  and
130              other useful information.
131

AUTHOR

133       Kirk Bauer <kirk@kaybee.org>
134       http://www.kaybee.org/~kirk
135       ftp://ftp.kaybee.org/pub/redhat/RPMS
136
137
138
139Linux                            October 2005                      LOGWATCH(8)
Impressum