On Mon, 2015-09-14 at 14:51 -0400, James B. Byrne wrote: > The Logwatch imapd service script distributed with CentOS-6 does not > generate anything when I run logwatch --service all on a cyrus-imapd > host. Is this expected behaviour? Is there a separate script for > cyrus-imapd or are their configuration options required to get the > existing script to work. 1. Check there is data in the log file(s). 2. Ensure Logwatch has the correct location and names of your log files. Check: /usr/share/logwatch/default.conf/logfiles/ - there should be a 'imapd' file there. I don't use imapd and there is no such file on my instances of C6. Using my /usr/share/logwatch/default.conf/logfiles/exim.conf as an example (I don't use any of these entries):- > # Which logfile group... > LogFile = exim/main.log > LogFile = exim/mainlog > LogFile = exim4/mainlog > Archive = exim/main.log.* > Archive = archiv/exim/main.log.* > Archive = exim/mainlog.* > Archive = exim4/mainlog.* > Archive = exim/main.log-* > Archive = archiv/exim/main.log-* > Archive = exim/mainlog-* > Archive = exim4/mainlog-* User changes should be in: /etc/logwatch/conf/logfiles My /etc/logwatch/conf/logfiles/eximlog.conf has:- > # Server 4 > # This is : /etc/logwatch/conf/logfiles/eximlog.conf > # Referenced by : /etc/logwatch/conf/services/exim.conf > > LogFile = exim/m4.main > Archive = /data/logs.old/exim/m4.main.* 3. The name I use 'eximlog.conf' is defined in /etc/logwatch/conf/services/exim.conf 4. Check for a script in: /usr/share/logwatch/scripts/services/imapd 5. Put modifications (whole replacement scripts) in /etc/logwatch/scripts/services/imapd 6. You can then test Logwatch by logging-on to the server and typing logwatch --print --service imapd --range today The range can also be: yesterday or even '-21 days' (with apostrophes) The problem with log watch is far too many names identical or almost identical. Good Luck. -- Regards, Paul. England, EU. England's place is in the European Union.