I know it is customizable. I customized quite a few scripts and services Logwatch has in order to suit my needs. However, you need to have "the base" to customize, for example dovecot, proftpd, postfix, etc., but when there is no "base" script and service (for example Bind9 in Logwatch) you have nothing to customize it from, that is in that case you need to write these two in perl first yourself then. I tried to use the closest one there is in Logwatch to Bind9 called "name" (script and service) but the name script won't read the Bind's log files as the output formats are different. Someone needs to write / create a script and a service for Bind9 in Logwatch. I am not that good at perl scripting to do it myself from scratches )

There is a /usr/share/logwatch/scripts/services/named (not name) in my logwatch installation, which is Logwatch 7.4.0
Again, I haven't run bind in awhile, so have no recent experience with its logging, 'tho I seem to recall that it was customizable.

Maybe someone else can help, but maybe also you should start a new thread, as this logging discussion is pretty far off the "Bind and DNSBL" topic the thread started with. Just a thought.