How to change "sender:" field in the header of Logwatch emails

Arrived here via google with the same problem.

Adding the "-f user" option to sendmail in /usr/share/logwatch/default.conf/logwatch.conf had no effect.

Turns out logwatch.pl processes /usr/share/logwatch/dist.conf/logwatch.conf after /usr/share/logwatch/default.conf/logwatch.conf.

Edit or remove the MailFrom = root override in /usr/share/logwatch/dist.conf/logwatch.conf for it to work.


There are several locations where Logwatch configuration details can be specified, with each one superseding the previous one:

/usr/share/logwatch/default.conf/*
/etc/logwatch/conf/dist.conf/*
/etc/logwatch/conf/*
The script / command line arguments

It is recommended to change: /etc/logwatch/conf/logwatch.conf