Hi folks I'm after either some signposting to a more appropriate place to ask or a solution. The problem I have is that I'm trying to setup logwatch to monitor a log file for a script I've written and am having no joy whatsoever. Here's the steps I've taken and content, ownership and permissions of relevant files (ask if I've missed something useful).

  1. Setup script to log to /var/log/ssh-validate
  2. Create script to process logfile (/etc/logwatch/scripts/services/ssh-validate)
  3. Create logfile definition (/etc/logwatch/logfiles/ssh-validate)
  4. Create service definition (/etc/logwatch/services/ssh-validate.conf)

File /etc/logwatch/scripts/services/ssh-validate     root:root    -rwxr-xr-x
Perl script, reads from STDIN, outputs to STDOUT, works from command line (using cat /var/log/ssh-validate | ./ssh-validate)


File /etc/logwatch/logfiles/ssh-validate    root:root    -rw-r--r--
LogFile = ssh-validate
Archive = ssh-validate.*.gz


File /etc/logwatch/services/ssh-validate.conf    root:root    -rw-r--r--
Title = ssh-validate
LogFile = ssh-validate


--
Robert Gauld
http://www.robertgauld.co.uk