Sometimes you get too much output from logwatch's sendmail parser. This WFU patch will cut down on the number of lines returned by watching the 'return to sender' lines.
cd /etc/log.d
patch -p1 < ~/logwatch-sendmail.patch
logwatch comes with an sshd2 parser, but the parser looks at the wrong logfile. 'secure.conf' has to be modified, too. This patch changes the configuration file and additionally does some rudimentary log parsing. To apply:
cd /etc/log.d
patch -p1 < ~/logwatch-sshd2.patch