Maybe have a look at :
I agree that the append feature is not well documented.
There is an old documentation available:
https://web.archive.org/web/20160316100057/http://mathias-kettner.de/checkmk_logfiles.html?mwg_rnd=9931125
- As far as I understand there is only one service necessary with rule “Logwatch Event Console Forwarding”. No need for separate service per logfile.
I need to check in 2.0 what is the result of a violation of the option “Monitoring of forwarded logfiles” “Warn if list of forwarded logfiles changes”
- and 2. is most probably related to discovery feature.
At least it should be covered by the option “List of expected logfiles”
I also here need to check the current behavior in 2.0. - I somehow agree. Even because we do not really care about UNKNOWN alerts. For me this is not a new feature but needs to be handled as a bug.
For further discussions I would recommend to use the forum thread. I am open to do some tests and share screenshots there if you feed me with details.