Good afternoon PLUG,<br><br>Let me begin by defining the problem:<br><br>I have servers that I monitor and was hoping to cut the apache sections of the logwatch down a bit. These servers have had website changes which leave links that people have made to images come up as failed access attempts in logwatch. Most of these are a known issue. I do not want to add these to the regex ignore file for logwatch, as they may become a real issue in the future. The one consistent bit of information that defines the true problems from the false positives is the number of times the problem happens. Generally, if the failure happens more than 100 times, I want to know about it. The rest I don&#39;t want in the e-mail. <br>
<br>I have attempted to manipulate the apache configs in logwatch but have failed to accomplish my goal. This may be due to my lack of perl scripting skills.<br><br>Has anyone else attempted something similar?<br><br>Is there a way to manipulate a cache file output before its added to the e-mail?<br>
<br>I was hoping to do this somewhere inside logwatch, rather than changing the cron to manipulate it before sending the e-mail.<br><br>Thanks in advance!<br><br> - Tim<br>