Logwatch: improve logwatch to handle only one file, the newest file with manual service name
It is imperative to enhance the functionality of Logwatch to facilitate the monitoring of a single file, specifically the most recent one.
At present, the issue under consideration is the presence of undesirable services, which are a consequence of the definition of the rule "/var/log/xxx_yyy_*.log."
It is not possible to define a single log after xxx_yyyy_<are variable numbers and strings>.log.
However, it should be noted that Logwatch/Checkmk has to be designed to manage only the most recent file. Therefore, it is imperative that the designation of the service be adaptable, or even more ideally, manually assigned.
jysl2mjarj9sd2ymzp37.png
Comments: 2
Oldest
•
Newest
•
Most likes
•
Fewest likes
-
23 May, '25
Lars SörensenYou encounter the same or a similar issue when log files are rotated...
https://ideas.checkmk.com/suggestions/349643/mk_logwatch-ensure-that-no-events-are-lost-during-log-rotations -
22 Aug, '25
Lars SörensenThe mk_logwatch plugin urgently needs a reliable log rotation detection. The check_logs plugin by ConSol has supported this functionality since as early as 2006. While innovation and new features are essential, maintaining and enhancing existing tools is just as important to ensure long-term reliability.