Setup logwatch¶

taken from https://ubuntu.com/server/docs/logwatch

sudo apt install logwatch

You will also need to manually create its temporary directory in order for it to work:

sudo mkdir /var/cache/logwatch

Logwatch’s stock configuration is kept in /usr/share/logwatch/default.conf/logwatch.conf, however rather than edit our configuration changes directly to that file, the convention is to copy it into /etc for modification:

sudo cp /usr/share/logwatch/default.conf/logwatch.conf /etc/logwatch/conf/

With your favorite editor, open /etc/logwatch/conf/logwatch.conf. The uncommented lines indicate the default configuration values. First, lets customize some of the basics:

Output = mail
#  MailTo = me@mydomain.org
#  MailFrom = logwatch@host1.mydomain.org
#  Detail = Low
#  Service = All

troubleshoot¶

it was necessary to add a known addressee in /etc/aliases who get's all root mails

vim /etc/aliases

root:          me@example.com