This might be off topic to the list. We have Clam AV running on Fedora 30 with clamav-milter, clamav-0.101.4-1.fc30.x86_64, and sendmail. On one server the logwatch emails do send a daily recap as desired such as this stanza:
--------------------- Clamav Begin ------------------------
Viruses detected: Sanesecurity.Jurlbl.2a2f26.UNOFFICIAL: 1 Time(s) Sanesecurity.Jurlbl.550e2a.UNOFFICIAL: 1 Time(s) Sanesecurity.Jurlbl.66a5cd.UNOFFICIAL: 1 Time(s) SecuriteInfo.com.Spam-3504.UNOFFICIAL: 1 Time(s) SecuriteInfo.com.Spam-3953.UNOFFICIAL: 1 Time(s) SecuriteInfo.com.Spam-4044.UNOFFICIAL: 2 Time(s) ---------------------- Clamav End ------------------------- On the other server, logwatch only shows this (not the above): Messages quarantined by milter: [Occurrences >= 1] clamav-milter: quarantined by clamav-milter 6 Time Total: 6This config file is the same on both servers:
cat /usr/share/logwatch/default.conf/services/clamav-milter.conf#################################################################### clamav script ver. 0.85.1 for Logwatch.## Written by S. Schimkat <www.schimkat.dk>.## Find latest version here: www.schimkat.dk/clamav###################################################################Title = "Clamav-milter"LogFile = messages# maillog retained for backwards compatibility, but may be deleted# at a later timeLogFile = maillog*OnlyService = clamav-milter*RemoveHeaders# To turnoff
unmatched output set to 1$clamav_ignoreunmatched = 0# vi: shiftwidth=3 tabstop=3 et
Is there another config file for this that I'm missing? Side note, the URL above, www.schimkat.dk/clamav, is now 404 page not found.