List Info

Thread: Re: Log file analyser recomendations




Re: Log file analyser recomendations
country flaguser name
United Kingdom
2007-10-08 11:13:02
MrC wrote:
> Robert Brooks wrote:

[..]

>> Oct  5 09:01:06 mailhost amavis[25870]: (25870-17)
Blocked SPAM, 
>> [84.79.70.165] [84.79.70.165]
<JohannahorseRushingphysorg.com> -> 
>> <userexample.org>, mail_id: HFW3sN8D+u30,
Hits: 20.862, size: 719, 
>> 11887 ms

[..]

> Without data in the log that supports such an
inference, there's nothing 
> that can be concluded.  Neither utility is aware of the
other and 
> neither tries to piece together the relationship
between past log 
> entries to construct a chain of events.

unless postfix-logwatch could be asked (via some config
flag) to 
consider the above amavis "Blocked SPAM" log line
as a reject to be 
accounted in the rejection percentages. Or amavis could be
asked to 
"postlog" something suitable.

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

[1]

about | contact  Other archives ( Real Estate discussion Medical topics )