Strange rsyslog error
Was receiving this error from logwatch and finally decided to track it down.
error: rsyslog:13 duplicate log entry for /var/log/cron.log
It was from cron.log being run twice, once in it’s own in /etc/logrotate.d/cron and then again in /etc/logrotate.d/rsyslog. Removed the line /var/log/cron.log from /etc/logrotate.d/rsyslog and all is better, no more duplicate entry notices.