Logwatch: Check plugin received no monitoring data

Here I am again…

Just updated from p16 to p20 and now have the same problem as a few months before. I followed these update steps:

Updates und Upgrades (checkmk.com)

I baked new agent with same settings/patterns. Now my Service check command check_mk-logwatch returns “The logfile does not exist on site.”

As it was last time solved with trial and error I’ve no idea what to do next. My expectation would ne that this check survives a simple minor update.

Debug on server

$ cmk --debug -vvn sdes1701.xxx
Checkmk version 2.1.0p20
...
<<<logwatch>>> / Transition HostSectionParser -> HostSectionParser
No persisted sections
  -> Add sections: ['check_mk', 'checkmk_agent_plugins_lnx', 'chrony', 'cifsmounts', 'cmk_agent_ctl_status', 'cpu', 'df', 'diskstat', 'ipmi', 'ipmi_discrete', 'job', 'kernel', 'labels', 'lnx_bonding', 'lnx_if', 'local', 'logwatch', 'md', 'mem', 'mounts', 'multipath', 'nfsmounts', 'ovs_bonding', 'postfix_mailq', 'postfix_mailq_status', 'ps_lnx', 'systemd_units', 'tcp_conn_stats', 'uptime', 'vbox_guest']
...
Kernel Performance   Process Creations: 12.61/s, Context Switches: 115088.22/s, Major Page Faults: 0.17/s, Page Swap in: 0.17/s, Page Swap Out: 0.91/s
Log /var/log/messages No error messages
Memory               Total virtual memory: 64.4% - 352.80 GB of 547.85 GB, 10 additional details available

Debug agent

# check_mk_agent
...
<<<local:sep(0)>>>
<<<logwatch>>>
[[[/var/log/messages]]]
BATCH: 1674725401-054008087061227026011056150165190074017105144067
[[[/var/log/messages]]]
BATCH: 1674725344-080231190195228175123040224198129149202143075105

checkmk’s logwatch config exists with the added patterns.

# cat /etc/check_mk/logwatch.cfg
# Created by Check_MK Agent Bakery.
# This file is managed via WATO, do not edit manually or you
# lose your changes next time when you update the agent.


"/var/log/messages" overflow=C
 C Out of memory
 C segfault


[root@sdes1701 ~]# ls -la /var/log/messages
-rw-------. 1 root root 13488103 Jan 26 10:34 /var/log/messages