Wow, thanks for the quick reply!
I'm clearly an idiot. By default (as specified in /etc/log.d/logwatch.conf) Logwatch sends log activity for YESTERDAY, but I had erased yesterday's log activity, Duh.
By backing up the confing and by changing output to stdout instead of email I saw what I wanted to see.
Actually I saw something I didn't want to see. but that's another thread.
Last edited by Stomatella; 11-25-2004 at 12:04 PM.