Mailing List Archive: [clamav-users] Logwatch not showing "Viruses detected"

This might be off topic to the list. We have Clam AV running on Fedora 30
with clamav-milter, clamav-0.101.4-1.fc30.x86_64, and sendmail. On one
server the logwatch emails do send a daily recap as desired such as this
stanza:
--------------------- Clamav Begin ------------------------
Viruses detected:
Sanesecurity.Jurlbl.2a2f26.UNOFFICIAL: 1 Time(s)
Sanesecurity.Jurlbl.550e2a.UNOFFICIAL: 1 Time(s)
Sanesecurity.Jurlbl.66a5cd.UNOFFICIAL: 1 Time(s)
SecuriteInfo.com.Spam-3504.UNOFFICIAL: 1 Time(s)
SecuriteInfo.com.Spam-3953.UNOFFICIAL: 1 Time(s)
SecuriteInfo.com.Spam-4044.UNOFFICIAL: 2 Time(s)
---------------------- Clamav End -------------------------

On the other server, logwatch only shows this (not the above):

Messages quarantined by milter: [Occurrences >= 1]
clamav-milter: quarantined by clamav-milter 6
Time
Total: 6

This config file is the same on both servers:
cat /usr/share/logwatch/default.conf/services/clamav-milter.conf
##################################################################
#
# clamav script ver. 0.85.1 for Logwatch.
#
# Written by S. Schimkat <www.schimkat.dk>.
#
# Find latest version here: www.schimkat.dk/clamav
#
##################################################################

Title = "Clamav-milter"
LogFile = messages
# maillog retained for backwards compatibility, but may be deleted
# at a later time
LogFile = maillog
*OnlyService = clamav-milter
*RemoveHeaders

# To turnoff unmatched output set to 1
$clamav_ignoreunmatched = 0

# vi: shiftwidth=3 tabstop=3 et

Is there another config file for this that I'm missing? Side note, the URL
above, www.schimkat.dk/clamav, is now 404 page not found.

Hi there,

On Wed, 30 Oct 2019, Robert Kudyba wrote:

> This might be off topic to the list. We have Clam AV running on Fedora 30
> with clamav-milter, clamav-0.101.4-1.fc30.x86_64, and sendmail. On one
> server the logwatch emails do send a daily recap as desired ...
> ...
> On the other server, logwatch only shows ...
> ...
> Is there another config file for this that I'm missing? ...

Guessing here, are the same messages being written to the logs on both
machines? I haven't used it in a loooong time, but I'm sure there's a
reason it's called 'logwatch'... :)

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml