Ah, I seen now what you mean. That’s a whole other question then your initial one.
For logwatch, how do you configure the level of each alert? Far as I know you don’t. It reads the logfile(s) and based on what the application logs the alert level is set. So if the application logs something as warning it’s a warning. And if it logs an error, logwatch regards it as an error.
However, what you can do is open the check, and in the service icons clik on the three horizontal lines and choose “Parameters for this service”. Then clik on “Logwatch patterns”, “Create logfile specific rule for”. And there you can add patterns in the log to search for and specify the criticality of the event.