I searched for [logwatch] skip and [logwatch] sunday and found nothing useful.
I have a handful of servers that email me logwatch reports daily. All servers send me email every day.
Except, on Sundays, only some servers send emails. Many of the logwatch sections are missing from the ones that do send. All the servers are doing the same duty. I'd expect Sunday traffic to be less, but not zero.
It's the not the same servers every week.This has been going on for months/years but I've finally decided to do something about it.
Any idea where to start looking?
Logwatch config seems identical on two servers I checked, one of which sent email this Sunday and the other didn't.
$ grep -v ^\\s*# /usr/share/logwatch/default.conf/logwatch.conf|grep -v ^\\s*$
LogDir = /var/log
TmpDir = /var/cache/logwatch
Output = stdout
Format = text
Encode = none
MailTo = root
MailFrom = Logwatch
Range = yesterday
Detail = Low
Service = All
Service = "-zz-network" # Prevents execution of zz-network service, which
Service = "-zz-sys" # Prevents execution of zz-sys service, which
Service = "-eximstats" # Prevents execution of eximstats service, which
mailer = "/usr/sbin/sendmail -t"
$ cat /etc/cron.daily/00logwatch
#!/bin/bash
#Check if removed-but-not-purged
test -x /usr/share/logwatch/scripts/logwatch.pl || exit 0
#execute
/usr/sbin/logwatch --output mail
Ubuntu 20.04
