Hi,

Enabling debug logging will show you if the bot found emails with matching subjects and with matching attachment names. You can set logging_level to DEBUG per bot or globally.

Please also share the output of `intelmqctl --check` and the version of IntelMQ you are using (`intelmqctl --version`)

Sebastian

On 18/02/2020 18.03, UCC-CERT wrote:

tail -n 1000 Mail-Attachment-Fetcher-Collector.log

2020-02-18 18:31:12,672 - Mail-Attachment-Fetcher-Collector - INFO - Email report read.

2020-02-18 18:31:19,310 - Mail-Attachment-Fetcher-Collector - INFO - Email report read.

2020-02-18 18:31:25,574 - Mail-Attachment-Fetcher-Collector - INFO - Email report read.

2020-02-18 18:31:31,816 - Mail-Attachment-Fetcher-Collector - INFO - Email report read.

Should you need any further information, please do not hesitate to contact me.

-- 
// Sebastian Wagner <wagner@cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg