Freshclam still detected in logwatch

On a couple cPanel 11.30.5 servers I started seeing this in the logwatch daily email after removing ClamAV:

 ——————————- clam-update Begin ———————————— 

 The ClamAV update process (freshclam daemon) was not running!
 If you no longer wish to run freshclam, deleting the freshclam.log
 file will suppress this error message.

 ——————————— clam-update End ————————————- 

I was unable to find freshclam.log anywhere on my system.

Turns out the file on my cPanel box was called clam-update.log.

After a quick “rm -f /var/log/clam-update.log”, and a manual run of logwatch, all was good!