diff --git a/services/nftables/audit-framework/audit.md b/services/audit-framework/audit.md
similarity index 100%
rename from services/nftables/audit-framework/audit.md
rename to services/audit-framework/audit.md
diff --git a/services/logwatch/logwatch.md b/services/logwatch/logwatch.md
new file mode 100644
index 0000000..b5a4949
--- /dev/null
+++ b/services/logwatch/logwatch.md
@@ -0,0 +1,7 @@
+# Logwatch
+
+## Installation and Setup
+
+* Install `logwatch` package.
+* The `logwatch.timer` needs to be started and/or enabled
+* Reference: `/usr/share/logwatch/HOWTO-Customize-LogWatch`