yes i use the Agent skript with SSH, everything works fine with it actually… but this problem with logwatch now.
i connect to the sshagentvm as root :
and the testfiles are created by root so should be ok.
/usr/bin/check_mk_agent | less
still show nothing. (after adding some new lines)
In my case after executing check_mk_agent the logwatch entry is shown on the buttom…
so without using less or somthing… it still does not show some Strings.
another question :
how can i tell the agent in the logwatch.cfg file to react to every matching entry and still show the old errors found ?