maillog vs Mailwatch log

[Mark Sapiro]

The system logging configuration is generally in /etc/rsyslog.conf and
/etc/rsyslog.d/*

Look there for where 'mail' entries are written.

For example, my /etc/rsyslog.d/50-default.conf has entries like

*.*;auth,authpriv.none          -/var/log/syslog
mail.*                          -/var/log/mail.log
mail.err                        /var/log/mail.err

which essentially says everything except auth and authpriv gets logged
to /var/log/syslog, all 'mail' log messages of any severity are logged
to /var/log/mail.log and 'mail' messages of severity 'err' or greater
are logged to /var/log/mail.err.

With this config, all 'mail' syslog entries of any severity will be
written to both /var/log/syslog and /var/log/mail.log.

What does yours say?

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan