The way it is set up now, you cannot run logwatch.pl without either creating the cache directory first or running /etc/cron.daily/00-logwatch, and that's sad.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=130fd3900a6254296acd6f14f8d7129992418ae5 commit 130fd3900a6254296acd6f14f8d7129992418ae5 Author: Thomas Deutschmann <whissi@gentoo.org> AuthorDate: 2017-11-04 18:19:22 +0000 Commit: Thomas Deutschmann <whissi@gentoo.org> CommitDate: 2017-11-04 18:21:43 +0000 sys-apps/logwatch: Bump to v7.4.3_p20171025 (snapshot release) - We are now creating /var/cache/logwatch via tmpfile (bug #607668) - Snapshot release should address missed dovecot log entires (bug #633916) Closes: https://bugs.gentoo.org/607668 Closes: https://bugs.gentoo.org/633916 Package-Manager: Portage-2.3.13, Repoman-2.3.4 sys-apps/logwatch/Manifest | 1 + .../files/logwatch-7.4.3+-openssh-hpn.patch | 16 +++ sys-apps/logwatch/files/logwatch.tmpfile | 1 + sys-apps/logwatch/logwatch-7.4.3_p20171025.ebuild | 108 +++++++++++++++++++++ 4 files changed, 126 insertions(+)