Checkmk force logwatch to read file from the beginning

Inside the 2.0 mk_logwatch.py you only need to set the “offset” value to None.
I would do this in line 629.

        if offset is not None and offset > size:
            offset = None
        offset = None
        # now seek to offset where interesting data begins
        log_iter.set_position(offset)

With this the script should read the file every time from the start.

1 Like