Nicolas Croiset

This kind of lines should be ignored also : 2025-08-24T10:58:31.691213+02:00 server9 dovecot: submission(fs@test.org)<2189752><az+mpbg9iqzbofqc>: Successfully relayed message: from=fc@test.org, size=730, id=E98nCDfUqmi4aSEAkhEa2Q, nrcpt=1, reply=`250 2.0.0 ok 1756025911 qp 2189755'</az+mpbg9iqzbofqc>

in clam-update.conf It was : clam_update_detail = 1 I change to : $clam_update_detail = 1 logwatch.conf : Detail = Low with the prefix $, it is now working :) Thanks !

Hi, my logwach today contains the list of virus detected not the release database :( --------------------- Clamav Begin ------------------------ Viruses detected: Sanesecurity.Foxhole.Zip_badexts48.UNOFFICIAL(3bf4419eb32e17251a28c570c018ad49:2300): 1 Time(s) no clam-update section.

Hi, my logwach today contains the list of virus detected not the release database :( --------------------- Clamav Begin ------------------------ Viruses detected: Sanesecurity.Foxhole.Zip_badexts48.UNOFFICIAL(3bf4419eb32e17251a28c570c018ad49:2300): 1 Time(s)

When I launch manually : logwatch --service clam-update --debug 1 --detail 1 I obtain : --------------------- clam-update Begin ------------------------ Detail set to 1 from conf/logwatch.conf Last ClamAV update process started at Tue Aug 26 23:15:29 2025 Last Status: daily.cld database is up-to-date (version: 27744, sigs: 2076458, f-level: 90, builder: raynman) main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr) bytecode.cvd database is up-to-date (version:...

Now I don't have the error message, and I don't have the expected result also... Logfile Name: clam-update 000-onlyservice = freshclam 001-removeheaders = 001-*applystddate = Made Temp Dir: /var/cache/logwatch/logwatch.wE27Y7JD with tempdir export LOGWATCH_DATE_RANGE='yesterday' export LOGWATCH_GLOBAL_DETAIL='1' export LOGWATCH_OUTPUT_TYPE='mail' export LOGWATCH_FORMAT_TYPE='text' export LOGWATCH_TEMP_DIR='/var/cache/logwatch/logwatch.wE27Y7JD/' export LOGWATCH_DEBUG='10' Preprocessing LogFile: syslog...

I notice all messages was in syslog file, so I try to use the case C in the message C. If you are logging using syslog, you need to indicate that your log file uses the syslog format. For example: echo "OnlyService = freshclam" >> /etc/logwatch/conf/logfiles/clam-update.conf echo "RemoveHeaders" >> /etc/logwatch/conf/logfiles/clam-update.conf But there is one thing wrong in the message, the last line should be: echo "*RemoveHeaders=" >> /etc/logwatch/conf/logfiles/clam-update.conf The equal character...

freshclam is launch as deamon mode : 9124 ? Ss 1:49 /usr/bin/freshclam -d --foreground=true The log you search is not in freshclam.log but in syslog files : 2025-08-10T01:00:15.821331+02:00 server9 freshclam[9124]: ClamAV update process started at Sun Aug 10 01:00:15 2025