Am 26.05.2014 16:31, schrieb mancyb...@gmail.com: > Hi yes sure but that would result in having 20 database rows for each email, > since that is what happens in the syslog, > each component (postfix, spamassassin, amavis, policyd, ...) writes few lines > in the syslog for each email sent or received. > > Also, if aggregating, that information must be correlated. > Well I guess the answer is no, perhaps qmail does it better?
*you* need to correlate that that's why the queue-id exists in the logs and if there are serveral servers talking to each other you get as last line in your own log even the queue-id of the destination this *can not* be in one line because that is just how email works - a message is accepted, queued, forwarded to filters and back, tried several times if the detsination is not available yet so there is per definition no process knowing the whole flow of a mail from A to Z and given how email works the first queue line may be written now and the final line (sent or bounced) 5 days later ___________________________________________ [root@srv-rhsoft:~]$ cat maillog | grep 3gcMzr47KVzBr0x May 26 04:43:04 srv-rhsoft postfix/smtpd[19441]: 3gcMzr47KVzBr0x: client=********* May 26 04:43:04 srv-rhsoft postfix/cleanup[19446]: 3gcMzr47KVzBr0x: message-id=<3gcMzq5pg3z1LHc@********> May 26 04:43:04 srv-rhsoft postfix/qmgr[28478]: 3gcMzr47KVzBr0x: from=**********, size=3265, nrcpt=1 (queue active) May 26 04:43:04 srv-rhsoft postfix/lmtp[19447]: 3gcMzr47KVzBr0x: to=********, relay=127.0.0.1[127.0.0.1]:24, delay=0.44, delays=0.16/0.04/0/0.25, dsn=2.0.0, status=sent (215 Recipient ******* OK) May 26 04:43:04 srv-rhsoft postfix/qmgr[28478]: 3gcMzr47KVzBr0x: removed
