Just a quick hint here to stop your daily logwatch email being filled up with messages like this:
Cp-Wrap[3624]: Pushing "47 GETDISKUSED enquiries domain.co.uk" to '/usr/local/cpanel/bin/eximadmin' for UID: 47 Cp-Wrap[3624]: CP-Wrapper terminated without error
Just go to the /etc/logwatch/conf/ignore.conf file, and add the following lines:
###### REGULAR EXPRESSIONS IN THIS FILE WILL BE TRIMMED FROM REPORT OUTPUT #####^Cp-Wrap.*?Pushing .*?GETDISKUSED.*?UID: 47^Cp-Wrap.*?CP-Wrapper terminated without error
That will filter out those annoying lines. Simples!
in secure.conf, about line 26 in ignore services why not add Cp-Wrap at the very end of the line?
That would certainly stop everything from Cp-wrap, but I didn’t want to stop all messages – just the most common annoying ones.
This was driving me crazy too; thanks for the quick fix 🙂