Logwatch and it's 7MB emails :-(

[edge]

Hi all,

I've been trying for some day's now, but I can not find a way to 'fix' it...

I've got Logwatch running on a cron job every night, and it's working really nice!.. To nice !!!

/etc/cron.daily/0logwatch
/etc/cron.daily/00-logwatch
(not sure why it's 2 times in the Cron, but that's how it was setup after installing Fedora RC4)

Every day I get 2 emails from Logwatch.
One is nice and small, but the other one is about 7MB everyday!
The part that is making it really big is the http, so now I would like LogWatch NOT to report that part!

I've added Service = "-http" to all the logwatch.conf files that I found on the system, but it did not work!

Am I missing something here?

It's the part that is in:
--------------------- httpd Begin ------------------------
..
..
--------------------- httpd Edn ------------------------

[falko]

What's in your logwatch.conf file? Did you restart logwatch?

[edge]

What's in your logwatch.conf file? Did you restart logwatch?

I've got 4 logwatch.conf files

/usr/share/logwatch/default.conf/logwatch.conf
/etc/log.d/conf/logwatch.conf
/etc/log.d/logwatch.conf (a symlink to conf/logwatch.conf)
/etc/logwatch/conf/logwatch.conf


This is what in the files:
In the: /usr/share/logwatch/default.conf/logwatch.conf

################
# /usr/share/logwatch/default.conf/logwatch.conf
################
LogDir = /var/log
TmpDir = /var/cache/logwatch
MailTo = root
Print = No
Range = yesterday
Detail = Low
Service = All
Service = "-zz-network"
Service = "-http"
mailer = /bin/mail

In the: /etc/log.d/conf/logwatch.conf (and symlink: /etc/log.d/logwatch.conf)

################
# /etc/log.d/conf/logwatch.conf
# /etc/log.d/logwatch.conf (a symlink to conf/logwatch.conf)
################
LogDir = /var/log
TmpDir = /tmp
MailTo = root
Print = No
Range = yesterday
Detail = 10
Service = All
Servide = "-http"
mailer = /bin/mail


In the: /etc/logwatch/conf/logwatch.conf

################
# /etc/logwatch/conf/logwatch.conf
################
# Local configuration options go here (defaults are in //usr/share/logwatch/logwatch.conf)


Did you restart logwatch?

Euhhhhhhh.. no.. For sure this is the problem :/
How do I restart it (I do not really want to do a reboot)

[falko]

Euhhhhhhh.. no.. For sure this is the problem :/
How do I restart it (I do not really want to do a reboot)
Do you have a logwatch init script in /etc/init.d?
You can then restart it with /etc/init.d/logwatch restart (or whatever the name of the init script is).