LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   Old files in logwatch tmpdir (https://www.linuxquestions.org/questions/linux-server-73/old-files-in-logwatch-tmpdir-901289/)

grob115 09-05-2011 03:34 PM
Old files in logwatch tmpdir
 
Hi, just got this in the e-mail from my server. Not sure what it's about. Is there a tutorial online where I can learn more about this? Not sure what a logwatch run is.

Code:
/etc/cron.daily/0logwatch:

You have old files in your logwatch tmpdir (/var/cache/logwatch):
        logwatch.u0f2N5EL
        logwatch.yUgJSXY4
The directories listed above were most likely created by a logwatch run that failed to complete successfully.  If so, you may delete these directories.

unSpawn 09-05-2011 03:44 PM
Quote:
Originally Posted by grob115 (Post 4462306)
Not sure what a logwatch run is.
Logwatch ('man logwatch') reads system and daemon log files and reports usually by email. It's a good way to find out about any anomalies, access violations and other warnings that you then can act on. Wrt the temp logs just change to /var/cache/logwatch and see if there's any reports in the logwatch.u0f2N5EL and logwatch.yUgJSXY4 directory. If so read them to find out why Logwatch failed to complete successfully. Afterwards just delete these directories.

grob115 09-06-2011 11:53 AM
Thanks. This is the first time I'm getting e-mails from the logwatch daemon. Is there a way to check if it's turned on for e-mailing the output, and the schedule at which it does?

unSpawn 09-07-2011 12:48 AM
It's in the configuration file or in the cronjob that runs it.

Aule 03-07-2012 02:31 AM
I'm getting the following message every minute from cron

Code:
You have old files in your logwatch tmpdir (/var/cache/logwatch):
        logwatch.XXXXXXXXX
The directories listed above were most likely created by a
logwatch run that failed to complete successfully.  If so, you
may delete these directories.
the exact name (XXXXXXXXX) is always different

The subject of the mail is: Cron <root@foo> /usr/sbin/logwatch --service dmeventd

I have checked /var/cache/logwatch and it is totally empty.

What is the reason for this?


All times are GMT -5. The time now is 10:41 AM.