Hi,
On Thu, Apr 26, 2018 at 8:46 AM, Mike <[email protected]> wrote:
> On 4/25/2018 2:08 PM, @lbutlr wrote:
>> This might be of use to others out there. I decided that monitoring mail.log
>> was too much of a pain with all the postscreen and dnsblog 'noise' from
>> obscuring the information that I wanted to see, so I split those log events
>> into their own log file using rsyslogd with the following lines in
>> rsyslogd.conf (before the lines that log mail.log)
>>
>> if $syslogtag contains 'postscreen' then /var/log/postscreen.log
>> if $syslogtag contains 'postscreen' then ~
>> if $syslogtag contains 'dnsblog' then /var/log/postscreen.log
>> if $syslogtag contains 'dnsblog' then ~
>>
>> This lets me keep mail.log for quite a while and rotate off postscreen.log
>> very quickly since it is not something I need to check very often at all.
>>
>> I've been doing this for a week or two now and found it useful enough I
>> thought it worth passing along.
>
> I have a similar log strategy but I let postfix do it for me.
>
> For example, my postscreen entry in master.cf is:
>
> smtp inet n - n - 1 postscreen
> -o syslog_facility=local2
I'm also using rsyslog on fedora but have considering storing my logs
in mariadb, along with those from amavisd-new and spamassassin. I've
configured amavisd-new to use JSON logging.
Is it possible to log directly to mariadb from postfix and skip
rsyslog entirely? It appears there are several third-party tools, but
there doesn't seem to be a native way...
Is it possible to configure postfix to log using JSON?
Is there an updated version of collate.pl? There's no version number
within the file, but the version I have produces "Use of uninitialized
value in concatenation" on line 112 on my system.
111 $transaction{$newid} =
112 $_ . $transaction{$newid};
113 $seqno{$newid} = ++$i if (! exists
$seqno{$newid});
114 }
