Classnotes | UNIX03 | RecentChanges | Preferences Logwatch is another widely used utility for UNIX systems. Logwatch is the default log monitoring utility for Red Hat and SUSE systems, while Logcheck is the default monitor for Debian.
As we are using Debian, we really wont go into too much detail with respect to Logwatch. However, this is alright, Logwatch differs from Logcheck by minor degrees.
Logwatch provides a number of scripting facilities for extending its functionality, however almost everything you'd need to use these scripts for can be accomplished by Logcheck's rather advanced rule base.
Ultimately, it is entirely up to the system administrator as to which log monitoring utility to use. Often, as they both essentially do the same thing, you will find it is easier to just use what your vendor provides by default rather than forging out with a different utility.
