> On 24/05/2021 10:20 Plutocrat <plutoc...@gmail.com> wrote: > > > Hi all, > > I run logwatch on a few servers and the script on there which parses the > dovecot logs provides waaaaaay too much detail, and contains a bunch of stuff > I'm not interested in. There's not much point in having a log summary if its > 100Kb long! The one for exim is also terrible, but I've replaced that with > eximstats, and a bit of bash scripting and have something I can work with. I > might at some point look at replacing that too. > > Now to my question. I haven't found anything in the dovecot family which > compares to eximstats. I was wondering if there possibly is a report tool, or > a way of extracting stats from doveadm just for key metrics such as 'number > of POP logins in the last 24 hours', number of failed passwords, etc. Things > that might be interesting on a logwatch report. Or maybe someone has written > a script already that can be used in logwatch in perl, python, bash, > whatever. Any pointers, suggestions, or ideas for useful summary metrics to > pull out of the logfiles are appreciated. > > I suspect I might end up writing one myself anyway, but I'm just keen to see > what already exists, get the benefit of anyone else's experiences in this > matter before I start. > > P.
with recent 2.3.14 metric auth_failed { filter=event=auth_request_finished and (not success=yes) group_by = service } service stats { inet_listener http { port = 9900 } } should produce auth_failed_pop3 etc. which you can collect with prometheus, or you can use `doveadm stats dump` Aki