FYI - You can do this with DLAnalyzer. On one of our last discussions we talked about having a weight range that spanned from zero. This way you could see the messages that were delivered.
If you specify spamdomains and that weight range as a test in the advanced report and set the filter method to "AND" you will get the desired results you are looking for.
Darrell
Nick Hayer writes:
Scott -
Do you have a handy dandy way of finding all the messages that were delivered "Message OK" *and* failed a certain test?
Like all the messages that were successfully delivered that failed SPAMDOMAINS. Even a count would be nice -
Thanks
-Nick Hayer
If you are just looking for all lines for a message, you can use:
FIND "afe0021101d68bb7" dec####.log /i
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
mailservers. Declude Virus: Catches known viruses and is the leader in
mailserver vulnerability detection. Find out what you've been missing:
Ask about our free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
------------------------------------------------
Check Out DLAnalyzer a comprehensive reporting tool for
Declude Junkmail Logs - http://www.dlanalyzer.com
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.