Ray Leventhal wrote: > Hi, > > # uname -a Linux obfuscated.example.com 2.6.18-128.4.1.el5 #1 SMP Tue > Aug 4 20:23:34 EDT 2009 i686 i686 i386 GNU/Linux > > I noticed a few days ago that I'm not getting my logwatch emails to the > root account any longer, and while I've definitely been applying updates > from base, no other changes have happened on this box. > > I ran logwatch at the command line: > > logwatch --detail medium --mailto root at fqdn.example.com > > but still no email. > > As expected, /etc/cron.daily has the following entry: > lrwxrwxrwx 1 root root 39 Jul 30 2008 0logwatch -> > /usr/share/logwatch/scripts/logwatch.pl > > Where should I start looking to figure out why logwatch seems not to be > doing its thing? > > Thanks in advance, > -Ray > > Thanks again to all who replied. The situation seems to have remedied itself with a log rotation (scheduled). Once the offending stuff was no longer part of the body of the logwatch emails, Mailscanner/clamd had nothing to complain about and this morning I find the weekend's logwatch emails nestled comfortably in root's inbox. Next step for me is finding where to allow logwatch emails regardless of their contents. Again, thanks to all, -Ray