Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

The default config for http-error logs in Logwatch on a CentOS 5 box (logwatch-7.4.0-1) includes the line:


That wipes out all lines, because Apache 2.2 uses StdDate format (e.g. Fri Sep 21 04:44:55 2012) not the standard Apache format (e.g. 04/Sep/2012:13:46:40 -0500).

The HOWTo-Customize-LogWatch file says:

If an executable script is declared in an /etc/logwatch/conf file, all of the executable script declarations in the corresponding file in /usr/share/logwatch/default.conf or /usr/share/logwatch/dist.conf are ignored.

If I create /etc/logwatch/conf/logfiles/http-error.conf and set


then it applies the StdDate filter after it has applied HttpDate filtering, rather than instead of.

Other than editing /usr/share/logwatch/default.conf/logfiles/http-error.conf (which I've resorted to for now, but shouldn't do because it is provided by an RPM) how am I supposed to disable a filter script in Logwatch?

share|improve this question
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.