On 2014-09-18 14:52, li...@rhsoft.net wrote:
Am 18.09.2014 um 15:23 schrieb James Bailey:
On 2014-09-18 13:42, li...@rhsoft.net wrote:
Am 18.09.2014 um 14:36 schrieb James Bailey:
I have postfix logging certain X-headers but they are entered as a
separate
line under postfix/cleanup. Is it possible to log X-header info to
the postfix/smtp lines?
smtp_header_checks = outgoing = smtpd
header_checks = incoming = cleanup
you can even log the same header twice to see the
difference of incoming and outgoing in case spamd
adds a spam-mark to the subject
but keep in mind "smtp_header_checks" will only contain
the ID and the header itself while "header_checks" also
conatin From, To, Helo
anyways, it will unconditional result in a separated line
This has worked thank you but I am still struggling to get the
X-header into the same line of the log as the
response codes. I really want to be able to track X-header and
response codes on the same line
no way - different parts of code responsible for the loglines
even if one could manage - i saw logfile-analyzers breaking in so
many ways
frankly you need to point them to a seperate logfile if you don't
want
"logwatch" flooded each day
Log flooding isn't a problem running a multi node ELK cluster in
Rackspace cloud that I can auto scale at will. Logs will be kept for
around 1-3 months then purged.
If it can not be done at the logging level I will see if it can be done
with some kind of line munging at the analysis level with Kibana or
querying ES directly. It is just much more difficult at this point in
the chain.
Much thanks for your help
Jim
--
Jim Bailey
System Administration
Free Solutions Networks Ltd.
42 Whitehall Street
Aylesbury
Buckinghamshire HP20 2JW
Tel. 00441296336447
Mob. 00447960909881
www.freesolutions.co.uk
