Context: I'm trying to set up ClamAV on several servers a (Debian 9; )nd setup Slack/pagerduty-based notifications. But the command never fired. Searching around for clued, I found a forum post that mentions virusaction being disabled here: https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.102/clamd/onaccess_fan.c#L85

This change has not reflected in the man page, neither is there any announcement on ClamAV website or social media. This needs to be fixed.

Is there a different way I can setup a notification on virus detection that does not involve parsing logs? If not, are there examples that someone can point to where simple log parsing tools are used? I'm trying to not have to rely on something heavy like elasticsearch for this.

--

Yogesh