I wasn't able to find text "amavis" in log file. I tried production server and finally I see it and I know what you suggest me. It looks like: Apr 5 15:11:56 s1 amavis[26789]: (26789-13) Passed CLEAN {RelayedOutbound}, LOCAL [127.0.0.1] <r...@serv1.example.com> -> < s...@domain.com>
Is it the line about which you said? 2018-04-05 14:53 GMT+02:00 chaouche yacine <yacinechaou...@yahoo.com>: > You didn't say what's wrong the line grepping on amavis ? it should give > you what you want : one line by sender. > > > On Thursday, April 5, 2018, 1:51:28 PM GMT+1, Poliman - Serwis < > ser...@poliman.pl> wrote: > > > I used this script and after comparison result generated by collate.pl > and mail.log file I think that sending one email gives few lines (generated > by collate.pl) which one of them include sender email address, in my case > it looks like in "from=<r...@s1.ubuntu.com>" and one include line > "from=<root>". And this behavior appears that many times as many emails I > will send. To be honest I am looking some pattern I could base. > > 2018-04-05 14:30 GMT+02:00 chaouche yacine <yacinechaou...@yahoo.com>: > > > I was talking about collate.pl > On Thursday, April 5, 2018, 12:04:45 PM GMT+1, Poliman - Serwis < > ser...@poliman.pl> wrote: > > > Yacine, do you say about collate.pl script or "from=" part from log file? > I suppose that abotu script. If collate.pl could group by some id, it > would be nice, because I would have only one line from log dependent from > particular email sent. > > 2018-04-05 12:31 GMT+02:00 chaouche yacine <yacinechaou...@yahoo.com>: > > No it won't, it will simply group qids together so that you can trace > individual e-mails, instead of having intermingled log lines from different > e-mails. > > > > > > > On Thursday, April 5, 2018, 7:10:11 AM GMT+1, Viktor Dukhovni < > postfix-us...@dukhovni.org> wrote: > > > > > > On Apr 5, 2018, at 2:07 AM, Poliman - Serwis <ser...@poliman.pl> wrote: > > > > Using collate.pl script I won't have to count "from=" from mail log, > this script merge it, am I right? > > Try it and see what you get. You may need to make some adjustments to the > regular expressions > depending on how your syslog formats the output, especially the date. > > > -- > Viktor. > > > > > -- > > *Pozdrawiam / Best Regards* > *Piotr Bracha* > > > > > -- > > *Pozdrawiam / Best Regards* > *Piotr Bracha* > -- *Pozdrawiam / Best Regards* *Piotr Bracha*