[Bug 1010625] [NEW] named logs are not being reported in logwatch

[Jacob Smith]

Public bug reported:

After upgrading from 10.04 to 12.04 named logs no longer show up in logwatch reports.
 
Not sure if this should be filed as a bug against rsyslog or logwatch.

There was a change to /etc/rsyslog.d/50-default.conf between 10.04 and
12.04 and a bunch of the seperate log files are now commented out and
most things are only in /var/log/syslog

Since the /usr/share/logwatch/default.conf/services/named.conf lists
"messages" as the log file it never reports any log data.

I changed my /etc/rsyslog.d/50-default.conf by uncommenting these lines
(match the config in 10.04):

daemon.
lpr.
user.
mail.info
mail.warn
*.=debug
*.=info

The last one above sends most stuff to the messages file so named logs
entries show up in logwatch reports after making the above changes.

Part of me believes rsyslog should be considered the problem but on the
other hand if rsyslog is "correct" then logwatch's named.conf needs to
be overiden in dist.conf to correct for the rsyslog change.

 
1. Description: Ubuntu 12.04 LTS
 Release: 12.04
 
2. logwatch:
   Installed: 7.4.0+svn20111221rev79-1ubuntu1
   Candidate: 7.4.0+svn20111221rev79-1ubuntu1
   Version table:
  *** 7.4.0+svn20111221rev79-1ubuntu1 0
         500 http://us.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
         100 /var/lib/dpkg/status
 
bind9:
  Installed: 1:9.8.1.dfsg.P1-4
  Candidate: 1:9.8.1.dfsg.P1-4ubuntu0.1
  Version table:
     1:9.8.1.dfsg.P1-4ubuntu0.1 0
        500 http://us.archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages
 *** 1:9.8.1.dfsg.P1-4 0
        500 http://us.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
        100 /var/lib/dpkg/status

rsyslog:
  Installed: 5.8.6-1ubuntu8
  Candidate: 5.8.6-1ubuntu8
  Version table:
 *** 5.8.6-1ubuntu8 0
        500 http://us.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
        100 /var/lib/dpkg/status
 
3. Logwatch reports/emails should contain named log information.
 
4. No named log information shows up in logwatch reports/emails.

** Affects: logwatch (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to logwatch in Ubuntu.
https://bugs.launchpad.net/bugs/1010625

Title:
  named logs are not being reported in logwatch

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1010625/+subscriptions