Here's a verbose log of amavis/spamassassin processing another high score that just came through. I don't see a peep about auto-learn. But it was unavailable too.
(posting via nabble, apologies if it wraps) Aug 10 11:03:39 mail2 amavis[377]: (00377-01) LMTP :10024 /var/spool/amavisd/tmp/amavis-20170810T110339-00377-JQiRqEtF: <cont...@qq.com> -> <shor...@myvirt.com> SIZE=175613 BODY=8BITMIME ENVID=671416;675610;322132;sachin2 Received: from tn2.companypostoffice.com ([127.0.0.1]) by localhost (tn2.companypostoffice.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP for <shor...@myvirt.com>; Thu, 10 Aug 2017 11:03:39 -0500 (CDT) Aug 10 11:03:39 mail2 postfix/smtpd[450]: disconnect from unknown[208.110.82.116] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) Checking: KmK8jCUCqcuq [208.110.82.116] <cont...@qq.com> -> <shor...@myvirt.com> Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: tie-ing to DB file R/O /etc/mail/bayes/bayes_toks Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: tie-ing to DB file R/O /etc/mail/bayes/bayes_seen Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: found bayes db version 3 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: DB journal sync: last sync: 0 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: corpus size: nspam = 349, nham = 478 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for *p = "U*contact D*qq.com D*com" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for X-Amavis-PolicyBank = "" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for X-Amavis-MessageSize = "174380" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for MIME-Version = "" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for *F = "U*shorton D*myvirt.com D*org U*yt5r4e3 D*qq.com D*com" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for To = "U*shorton D*myvirt.com D*org" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for *c = "/html;" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for x-spam-relays-external = " [ ip=208.110.82.116 rdns= helo=qq.com by=tn2.companypostoffice.com ident= envfrom= intl=0 id=1B93B3F5A auth= msa=0 ] [ ip=127.0.0.1 rdns=localhost helo=localhost by=qq.com ident= envfrom=cont...@qq.com intl=0 id=hhi1tk16lt0l auth= msa=0 ]" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for x-spam-relays-internal = " " Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for *RT = " " Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for *RU = " [ ip=208.110.82.116 rdns= helo=qq.com by=tn2.companypostoffice.com ident= envfrom= intl=0 id=1B93B3F5A auth= msa=0 ] [ ip=127.0.0.1 rdns=localhost helo=localhost by=qq.com ident= envfrom=cont...@qq.com intl=0 id=hhi1tk16lt0l auth= msa=0 ]" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for *r = " localhost (127.0.0 ip*127.0.0.1 ) by qq.com <shor...@myvirt.com>; envelope- <cont...@qq.com>)" Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: header tokens for *r = " localhost (127.0.0 ip*127.0.0.1 ) by qq.com <shor...@myvirt.com>; envelope- <cont...@qq.com>) qq.com (unknown [208.110.82 ip*208.110.82.116 ]) by tn2.companypostoffice.com (Postfix) <shor...@myvirt.com>; " Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: token '4001' => 0.999898854265489 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: token 'H*F:U*shorton' => 0.999772898574472 <snip 200ish similar tokens> <snip similar tokens> <snip similar tokens> <snip similar tokens>Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: token 'corresponde' => 0.998847880299252 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: token 'newcastle' => 0.998847880299252 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: score = 1 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: DB expiry: tokens in DB: 166030, Expiry max size: 150000, Oldest atime: 1501594564, Newest atime: 1502289189, Last expire: 1502304550, Current time: 1502381019 Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: opportunistic call found expiry due Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: bayes journal sync starting Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: bayes journal sync completed Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: expiry starting Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: expiry completed Aug 10 11:03:39 mail2 amavis[377]: (00377-01) SA dbg: bayes: untie-ing Then Aug 10 11:03:44 mail2 amavis[377]: (00377-01) KmK8jCUCqcuq(KmK8jCUCqcuq) SEND from <> -> <spa...@myvirt.com>, ENVID=671416;675610;322132;sachin2 BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9592B70 Aug 10 11:03:44 mail2 amavis[377]: (00377-01) Blocked SPAM {DiscardedInbound,Quarantined}, [208.110.82.116]:48315 [208.110.82.116] ESMTP/LMTP <cont...@qq.com> -> <shor...@myvirt.com>, (ESMTP://[208.110.82.116]:48315), quarantine: spa...@myvirt.com, Queue-ID: 1B93B3F5A, mail_id: KmK8jCUCqcuq, b: LxuIyLspX, Hits: 23.904, size: 174380, Subject: "Your order no #562-4581 has arrived", From: <shor...@myvirt.com>,_<yt5r...@qq.com>, helo=qq.com, Tests: [BAYES_999=0.2,BAYES_99=3.5,DCC_CHECK=3.2,DIGEST_MULTIPLE=0.293,HEADER_FROM_DIFFERENT_DOMAINS=0.001,HTML_MESSAGE=0.001,HTML_MIME_NO_HTML_TAG=0.377,MIME_HTML_ONLY=0.723,MISSING_MID=0.497,NORMAL_HTTP_TO_IP=0.001,OBFUSCATING_COMMENT=0.723,RAZOR2_CF_RANGE_51_100=0.5,RAZOR2_CF_RANGE_E8_51_100=1.886,RAZOR2_CHECK=2.5,RCVD_IN_BRBL_LASTEXT=1.449,RDNS_NONE=0.793,SPF_HELO_SOFTFAIL=3,SPF_SOFTFAIL=3,T_HTML_TAG_BALANCE_CENTER=0.01,URIBL_ABUSE_SURBL=1.25], autolearn=unavailable autolearn_force=no, autolearnscore=21.255, 5305 ms -- View this message in context: http://spamassassin.1065346.n5.nabble.com/Bayes-auto-learn-not-happening-tp138065p138252.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.