AH man, am im screwed here or what?

I just got new ensim server at rackshack. I went to install logcheck. I had found the 1.1.1-4.i386.rpm and installed it rpm -i.

nothing out of ordinary, but the files are not in correct locations, no info where to configure logcheck.

I tried to uninstall rpm -e and it tells me its not installed!
So I then try to reinstall it and it says its already installed.

I downloaded the 1.1.1-1.i386.rpm which is the version mentioned in the redhat 7.2 bible. Did a nodeps and force install. Probably bad idea, but files were in correct location but im not getting the logchecks via email.

Anyway for me to clear out logcheck, all versions? I can't seem to get rid of it! and i dont want to have to get a restore done just for that. I installed logcheck 1.1.1-1.i386.rpm on another server and worked fine.

Thanks!

Try rpm -q logcheck to see if it is registered on RPM database. If not, do a rpm --rebuilddb to rebuild the RPM database.

Logcheck sends its reports to root user. Try sending a mail to 'root' on the box, and see if you get the mail. If not, maybe you should reconfigure your MTA.

Priyadi Iman Nurcahyo

Thanks for your suggestion. I did the rpm -q for both of them and they both come up as not installed. So i did a --rebuilddb for 1.1.1-1.i386.rpm version. rpm -q still comes up "not installed."

now the logcheck, i have configured MAIL=myemail address so if it was working i should get email. I have looked around and all files are in correct locations, might be problem with the dependancies.

Any other ideas?

Thanks!

John