Making changes to the way log entries appear in logfiles makes logwatch scream with ”
**Unmatched Entries**” error in the reports. My earlier post on sendmail maillog modification did the similar thing. Errors bailed out in logwatch report where in sendmail script failed to identify the Subject as the genuine entry. To resolve this, logwatch sendmail.conf file can be modified as follows to identify Subject: as a filter.
$Sendmail_MatchFilter = ” \
if ( $ThisLine =~ /Subject:/ ) { \
$ThisLine = ”; \
}”
This helps to make logwatch ignore the Subject: line appearing in your sendmail maillog.
Enjoy!