The idea of matching web log entries (access_log) with timestamp works fine. Also noticed that the email address of the approved message is also in the log, which makes it much easier. Entry from access_log was:
10.x.x.x - - [17/Jan/2012:17:35:52 -0600] "GET /mailman/admindb/information?sender=zzzzzzzz%40utm.edu HTTP/1.1" 200 7069 10.x.x.x - - [17/Jan/2012:17:35:58 -0600] "POST /mailman/admindb/information HTTP/1.1" 200 6655 >From the vette log: Jan 16 07:08:40 2012 (1213) Information post from [email protected] held, message-id=<[email protected]>: Post to moderated list Jan 17 17:35:58 2012 (18899) held message approved, message-id: <[email protected]> Corresponds nicely with the timestamp of the email received from that list. About a 6 minute delay, but the list has 1200+ people on it... Our weblogs were in /usr/local/apache2/logs Bruce UTM ----Original Message----- From: Adam McGreggor [mailto:[email protected]] On Behalf Of Adam McGreggor Sent: Wednesday, January 18, 2012 11:59 AM To: Bruce Harrison Cc: [email protected] Subject: Re: [Mailman-Users] identifying moderator that approved a post On Wed, Jan 18, 2012 at 05:42:52PM +0000, Bruce Harrison wrote: > I don't think the headers show who the moderator would be. Message-ID, perhaps? -- "In matters of grave importance, style, not sincerity, is the vital thing" -- The Importance of Being Earnest ------------------------------------------------------ Mailman-Users mailing list [email protected] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
