On Wed, 14 May 2025 at 20:36, Helge Kreutzmann <deb...@helgefjell.de> wrote:
> Since todays update of logcheck I get every message twice, does message mean every email, email from logcheck, or line in the logceck report? is this perhaps because logcheck is reporting messages that are in the journal and rsyslog? (it should!) > and the > first entry is: > 2025-05-14T19:02:04.733378+02:00 twentytwo exim[42129]: 2025-05-14 19:02:04 > 1uFFUa-00000000AxR-2z0z failed to write to main log: length=98 result=-1 > errno=9 (Bad file descriptor) > 2025-05-14T19:02:04.735285+02:00 twentytwo exim[42129]: write failed on panic > log: length=123 result=-1 errno=9 (Bad file descriptor) > > Since exim (also in conjunction with previous logcheck) works fine this is exim saying that it was unable to write to /var/log/exim4/paniclog and failing - this very much suggests exim is not working fine if you are getting an emial from logcheck then that suggests logcheck is doing it's job and showing an issue. > However, I have no idea where to look for this problem, but I can most > certainly provide more information, please tell me what you need. obvious things would be is logcheck running from the systemd timer or the cron script? what exim configuration are you using? is the disk (or /var/log partition) full? what are the permissions on /var/log/exim4/ and /var/log/exim4/paniclog? (ls -l ?) is anything in paniclog? do other email messages work? what lines are in the journal when logcheck runs? what happens if you run logcheck manually? with the -d option? what is in logcheck.conf? (do check if anything is sensitive before posting to the bug - dont think there should be)
