Why don't you create a simple scheduled task with a batch file. We also remove stale infected messages that way.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Imail Admin Sent: Monday, March 07, 2005 6:49 PM To: [email protected] Subject: Re: [Declude.Virus] Question on DLAnalyzer Hi Darrell, In general, of course, rotating out old log files is always a good idea. On the other hand, it can often be forgotten, unless you're short of disk space. I just moved the log files to an archive directory, so I'll have to accumulate data for a few days to see what the report will look like without last year's data mixed in. Thanks, Ben ----- Original Message ----- From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Monday, March 07, 2005 3:15 PM Subject: Re: [Declude.Virus] Question on DLAnalyzer > Ben, > > You are 100% correct on your diagnoses. If you had the date range set to > 3/7/2005 it will read the dec0307.log file in its entirety. In the course > of programming DLAnalyzer the possibility of someone still having last years > log file in the same location where the Declude logs were generated never > crossed my mind. > > I will add this to the list of items to be fixed in the next service > release. However, I would recommend that you rotate your log files even > though this will be corrected in the next service release as having to read > through all that data will add extra processing time. > > Darrell > ------------------------------------------------------------------------ > Check out http://www.invariantsystems.com for utilities for Declude And > Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG > Integration, and Log Parsers. > > Imail Admin writes: > > > Hi Darrell, > > > > I've been testing DLAnalyzer Lite, but the results haven't made sense to me. > > Then I noticed something strange: the list of tests failed include some > > tests that we haven't used (or had defined in our global.cfg file) since > > early last year. > > > > The Declude JM log files cycle each year, so that the March 5th data from > > this year is appended to the entries from March 5th of last year. Thus, a > > single day's log file (such as dec0305.log) could include data from prior > > years. Each line is dated, so that I expected that the Analyzer would be > > able to distinguish the correct year, but maybe not. So now I'm wondering > > if DLAnalyzer just processes an entire log file at a time, without > > distinguishing the true years of the data. In our case, that would mix > > results of 2005 with 2004, which might explain why my report results didn't > > make sense. > > > > Can you enlighten me? > > > > Thanks, > > > > Ben > > > > --- > > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
