How to change "sender:" field in the header of Logwatch emails

Question

I changed MailFrom="" in /usr/share/logwatch/default.conf/logwatch.conf

That altered "From:" in the headers, but "Sender:" is still "root@ip-xx-xx-xx-xx.domain"

EC2 Linux AMI beta, Postfix is the mailer

Changing default mailer to use -> mailer= "sendmail -t -f user@your.domain" helped. — Skylervich, Jun 14 '11 at 18:22

score 6 · Answer 1 · answered Apr 20 '12 at 01:29

6

Arrived here via google with the same problem.

Adding the "-f user" option to sendmail in /usr/share/logwatch/default.conf/logwatch.conf had no effect.

Turns out logwatch.pl processes /usr/share/logwatch/dist.conf/logwatch.conf after /usr/share/logwatch/default.conf/logwatch.conf.

Edit or remove the MailFrom = root override in /usr/share/logwatch/dist.conf/logwatch.conf for it to work.

answered Apr 20 '12 at 01:29

drgrog

Agree with editing /usr/share/logwatch/dist.conf/logwatch.conf. But also check the script (if any) executed by cron for more overrides. For Ubuntu (Precise) this is in /etc/cron.daily/00logwatch. If the package maintainer overwrites these you will need to revisit them. – mckenzm Nov 17 '12 at 20:07

score 4 · Answer 2 · answered Jul 18 '14 at 20:00

There are several locations where Logwatch configuration details can be specified, with each one superseding the previous one:

/usr/share/logwatch/default.conf/*
/etc/logwatch/conf/dist.conf/*
/etc/logwatch/conf/*
The script / command line arguments

It is recommended to change: /etc/logwatch/conf/logwatch.conf

2 Answers2