On 3/22/06, hkclark@xxxxxxxxx <hkclark@xxxxxxxxx> wrote: > On 3/22/06, Matt Morgan <minxmertzmomo@xxxxxxxxx> wrote: > > > > > > *Remove = "two words" > > > > Thanks. Do you have any documentation on that? I can't find any, > > either in the man page or on logwatch.org. I'll try it and see what > > happens anyway, and report back. > > Yeah, looks like Kirk has something off on the site. You should be > able to get to it via the web interface to the CVS repository: > > http://www2.cvs.autorpm.org:8080/index.cgi/logwatch/HOWTO-Customize-LogWatch?rev=1.8&hideattic=0&content-type=text/vnd.viewcvs-markup > > http://www2.cvs.autorpm.org:8080/index.cgi/logwatch/Attic/HOWTO-Customize-Configuration?rev=1.4&hideattic=0&content-type=text/vnd.viewcvs-markup > > Or try this if those links don't work: > http://www2.cvs.autorpm.org:8080/index.cgi/logwatch/?hideattic=0#dirlist > (Just click in the "Rev" column to view the doc vs the log entries). > > Let me know if you get stuck and I can look through my notes. Thanks!! I think you may be right. The asterisk at the beginning of the line means "runs the shared script named like the word after the asterisk, and the shared script "remove" just does a /bin/egrep -vi "$@" that is, selects everything but what I typed in, case-insensitively. Will report back tomorrow after logwatch has another chance to run.