Running logwatch with the dhcpd service doesn't result in any output despite there being lots of dhcpd log lines. I've spent a little while trying to understand how dhcpd parsing is supposed to work, but I'm not quickly able to figure out where the problem is.

$ sudo grep dhcpd /var/log/syslog.1 | wc
    621    8990   67996
$ sudo /usr/sbin/logwatch --service dhcpd
$