Munroe, > I am trying to get amavis-logwatch and other various log analyzers to > report the hit frequency of various SA rules. But I do not see amavis > logging in /var/log/mail.log which rules are being hit per message. > How do I enable this?
Modify $log_templ and include any macro calls you like in your main (log level 0) log entries. See README.customize for a list of macros and their description. In your case you'd want a %T to be included in a template, e.g.: [? %#T ||, Tests: \[[%T|,]\]] The amavisd.conf-sample provides an example of an assignment to $log_templ : $log_templ = <<'EOD'; [?%#D|#|Passed # [? [:ccat|major] |OTHER|CLEAN|MTA-BLOCKED|OVERSIZED|BAD-HEADER|SPAMMY|SPAM|\ UNCHECKED|BANNED (%F)|INFECTED (%V)]# , [? %p ||%p ][?%a||[?%l||LOCAL ]\[%a\] ][?%e||\[%e\] ]%s -> [%D|,]# [? %q ||, quarantine: %q]# [? %Q ||, Queue-ID: %Q]# [? %m ||, Message-ID: %m]# [? %r ||, Resent-Message-ID: %r]# , mail_id: %i# , Hits: [:SCORE]# , size: %z# [~[:remote_mta_smtp_response]|["^$"]||[", queued_as: "]]\ [remote_mta_smtp_response|[~%x|["queued as ([0-9A-Z]+)$"]|["%1"]|["%0"]]|/]# [? [:header_field|Subject] ||, Subject: [:dquote|[:header_field|Subject]]]# [? [:header_field|From] ||, From: [:uquote|[:header_field|From]]]# [? [:useragent|name] ||, [:useragent|name]: [:uquote|[:useragent|body]]]# [? %#T ||, Tests: \[[%T|,]\]]# [:supplementary_info|SCTYPE|, shortcircuit=%%s]# [:supplementary_info|AUTOLEARN|, autolearn=%%s]# , %y ms# ] [?%#O|#|Blocked # [? [:ccat|major|blocking] |# OTHER|CLEAN|MTA-BLOCKED|OVERSIZED|BAD-HEADER|SPAMMY|SPAM|\ UNCHECKED|BANNED (%F)|INFECTED (%V)]# , [? %p ||%p ][?%a||[?%l||LOCAL ]\[%a\] ][?%e||\[%e\] ]%s -> [%O|,]# [? %q ||, quarantine: %q]# [? %Q ||, Queue-ID: %Q]# [? %m ||, Message-ID: %m]# [? %r ||, Resent-Message-ID: %r]# , mail_id: %i# , Hits: [:SCORE]# , size: %z# #, smtp_resp: [:smtp_response]# [? [:header_field|Subject] ||, Subject: [:dquote|[:header_field|Subject]]]# [? [:header_field|From] ||, From: [:uquote|[:header_field|From]]]# [? [:useragent|name] ||, [:useragent|name]: [:uquote|[:useragent|body]]]# [? %#T ||, Tests: \[[%T|,]\]]# [:supplementary_info|SCTYPE|, shortcircuit=%%s]# [:supplementary_info|AUTOLEARN|, autolearn=%%s]# , %y ms# ] EOD The default value of $log_templ is provided by the end of file amavisd, search for: # This text section governs how a main per-message amavisd-new log entry You may modify a template there - just remove the first '#' in two lines: #[? %#T ||, Tests: \[[%T|,]\]]# or provide a new assignment to $log_templ in amavisd.conf like in the above example. Mark ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
