We are running logwatch on a central Linux Redhat server and attempting to pull reports back from other Redhat servers.

Using the following command from root on the central server:
logwatch --hostlimit remotehost --filename /tmp/remotehost.html

We are using this same command with 4 other servers and they are all sending reports back and being placed in the /tmp folder on the central server.

Only one of the remote servers is not working. Not getting any reports in the /tmp directory. When we run logwatch with the --debug med switch we don't see the "(cat....)" lines that are actually processing the reports that were received.

Any help would be appreciated in determining why this one remote server is not sending anything back.

Usually when one machine isn't responding, for any software, I will check Selinux first. Have you checked the selinux settings on box1 vs box4?

I checked the selinux settings between a remotehost that is working and a remotehost that is not working. Both are enabled and enforcing. Compared the SELinux booleans and they are identical. It doesn't look like it's SELinux causing the issue.

Any other ideas would be appreciated or some other methods to trouble shoot this.