I find logwatch very useful - except there are a huge number of lines of messages that I would prefer not to have reported. For example from Dovecot and ProFTPD:
dovecot: imap(email@example.com): Disconnected: Logged out bytes=156/2568: 1 Time(s)
dovecot: pop3(firstname.lastname@example.org): Disconnected: Logged out top=0/0, retr=1/29134, del=2/56, size=1378698: 1 Time(s)
XX.XXX.XXX.XXX (::ffff:XX.XXX.XXX.XXX[::ffff:XX.XXX.XXX.XXX]) - Preparing to chroot to directory '/home/somedomain.com'
Is there a way to suppress certain items like this (but I still want to watch for other messages from Dovecot and ProFTPd)?
Logwatch version is 7.3.6