OK. In /etc/amavis/conf.d/50.user, I see this:
# Quarantine SPAM.
#$spam_quarantine_to = 'spam-quarantine';
# Quarantine method. How to store mail body.
# - 'local:spam-%i-%m', quarantine mail on local file system.
# - 'sql:', quarantine mail in SQL server specified in @storage_sql_dsn.
# - undef, do not quarantine mail.
#$spam_quarantine_method = 'sql:';
$spam_quarantine_method = undef;
To store on the file system, I would (1) uncomment the second line, and (2) change undef in the last line to local:spam-%i-%m, correct?