Ray Leventhal wrote:
Hi,
# uname -a Linux obfuscated.example.com 2.6.18-128.4.1.el5 #1 SMP Tue Aug 4 20:23:34 EDT 2009 i686 i686 i386 GNU/Linux
I noticed a few days ago that I'm not getting my logwatch emails to the root account any longer, and while I've definitely been applying updates from base, no other changes have happened on this box.
I ran logwatch at the command line:
logwatch --detail medium --mailto root@fqdn.example.com
but still no email.
As expected, /etc/cron.daily has the following entry: lrwxrwxrwx 1 root root 39 Jul 30 2008 0logwatch -> /usr/share/logwatch/scripts/logwatch.pl
Where should I start looking to figure out why logwatch seems not to be doing its thing?
Thanks in advance, -Ray
Thanks again to all who replied. The situation seems to have remedied itself with a log rotation (scheduled). Once the offending stuff was no longer part of the body of the logwatch emails, Mailscanner/clamd had nothing to complain about and this morning I find the weekend's logwatch emails nestled comfortably in root's inbox.
Next step for me is finding where to allow logwatch emails regardless of their contents.
Again, thanks to all, -Ray