Logwatchfreshclam log error
I get the following error message with logwatch:
--------------------------------------------------------------
No updates detected in the log for the freshclam daemon (the
ClamAV update process).
--------------------------------------------------------------
I already filed a bug because imo the default settings aren't working.
Now I try to solve this but I can't pinpoint the exact root cause.
Freshclam is working and running.
I tried creating a 'clam-update.conf' with the correct path, this didn't
work. Anyone else who has an idea what might be the problem? Thanks in
advance! Some relevant information:
---------------------------------------------------------------
# cat /usr/share/logwatch/dist.conf/logfiles/clam-update.conf
LogFile = /var/log/clamav/freshclam.log
# /etc/init.d/clamav-freshclam status
freshclam is running.
# grep log /usr/share/logwatch/default.conf/logfiles/clam-update.conf#
Analyzes the Clam Anti-Virus update log
# /usr/share/logwatch/default.conf/logfiles/clam-update.conf (this file)
# /usr/share/logwatch/default.conf/services/clam-update.conf
# /usr/share/logwatch/scripts/services/clam-update
# /var/log/clam-update
# alert, you should delete the logfile. If there's no logfile, no alerts
# will be output - but if Logwatch finds a logfile and no update attempts
LogFile = freshclam.log
LogFile = clamav/freshclam.log
Archive = freshclam.log.*
Archive = clamav/freshclam.log.*
Archive = archiv/freshclam.log.*
# tail /var/log/clamav/freshclam.log
Tue Jul 27 15:39:24 2010 -> ClamAV update process started at Tue Jul 27
15:39:24 2010
Tue Jul 27 15:39:24 2010 -> main.cvd is up to date (version: 52, sigs:
704727, f-level: 44, builder: sven)
Tue Jul 27 15:39:54 2010 -> nonblock_connect: connect timing out (30 secs)
Tue Jul 27 15:39:54 2010 -> Can't connect to port 80 of host
db.local.clamav.net (IP: 192.121.13.5)
Tue Jul 27 15:39:54 2010 -> Trying host db.local.clamav.net
(193.1.193.64)...
Tue Jul 27 15:39:54 2010 -> Downloading daily-11440.cdiff [100%]
Tue Jul 27 15:39:54 2010 -> daily.cld updated (version: 11440, sigs:
107962, f-level: 53, builder: arnaud)
Tue Jul 27 15:39:54 2010 -> bytecode.cld is up to date (version: 32,
sigs: 8, f-level: 53, builder: edwin)
Tue Jul 27 15:39:54 2010 -> Database updated (812697 signatures) from
db.local.clamav.net (IP: 193.1.193.64)
Tue Jul 27 15:39:54 2010 -> --------------------------------------
Logwatch error message:
--------------------- clam-update Begin ------------------------
No updates detected in the log for the freshclam daemon (the
ClamAV update process). If the freshclam daemon is not running,
you may need to restart it. Other options:
A. If you no longer wish to run freshclam, deleting the log file
(default is freshclam.log) will suppress this error message.
B. If you use a different log file, update the appropriate
configuration file. For example:
echo "LogFile = log_file" >>
/etc/logwatch/conf/logfiles/clam-update.conf
where log_file is the filename of the freshclam log file.
C. If you are logging using syslog, you need to indicate that your
log file uses the syslog format. For example:
echo "*OnlyService = freshclam" >>
/etc/logwatch/conf/logfiles/clam-update.conf
echo "*RemoveHeaders" >>
/etc/logwatch/conf/logfiles/clam-update.conf
---------------------- clam-update End -------------------------
Reply to: