Re: [Declude.JunkMail] LOG Levels

[Serge]

Bill and All
Here is a line that will give me all sessions from a user:
grep "MAIL FROM:[EMAIL PROTECTED]" D:\log1104.txt | gawk "{print $5}" | uniq 
> test.txt

Now how do I use a pipe or a batch file to get all the lines for all these 
sessions in a single file ?
(this is Imail syslog logs)

TIA

----- Original Message ----- 
From: "Bill Landry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, November 05, 2004 2:52 AM
Subject: Re: [Declude.JunkMail] LOG Levels


----- Original Message ----- 
From: "Scott Fisher" <[EMAIL PROTECTED]>

I constantly use this batch file to find in the Declude logs.
I change the V_logday to the day of the log to search
and the V_find to the term to find. (It's usual a specific mail id
(Q7172144401ba4a6b or such) and I'll get all log pieces for that mail 
item.
set v_path=c:\declude\logs
set v_logpath=c:\declude\logs
rem -
rem - set v_logday to 05* to search all May logs
Rem - set V_logday to * to search all logs
Rem - set v_logday to 0511 to search May 11 log
set V_logday=1029
Rem - set v_find to what to search for. Use a period a wildcard in place
of a space (Triggered.IS.Filter)
set v_find="MAILFROM-REVDNS-MATCH"
cd /d %v_path%
if exist findlog.txt del findlog.txt
grep -i -U %v_find% %v_logpath%\dec%v_logday%.log > FindinDecludeLog.txt
Wow, if you are looking for a specific Q-ID, why go to so much trouble. 
Why
not just search for the Q-ID (minus the Q and extension in the Q-ID), for
example:

   grep e508201c008e3423 m:\imail\spool\spam\log\dec1104.log
That will give you every line for the Q-ID searched on, in the order they
were written to the log.
If you also want all of the virus log entries for that same Q-ID:
   grep e508201c008e3423 m:\imail\spool\virus\log\vir1104.log
And if you want to find all of the IMail log entries for that Q-ID, as 
well:

   grep e508201c008e3423 m:\imail\spool\sys1104.txt
Bill
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.