You didn't say what's wrong the line grepping on amavis ? it should give you what you want : one line by sender.
On Thursday, April 5, 2018, 1:51:28 PM GMT+1, Poliman - Serwis <ser...@poliman.pl> wrote: I used this script and after comparison result generated by collate.pl and mail.log file I think that sending one email gives few lines (generated by collate.pl) which one of them include sender email address, in my case it looks like in "from=<r...@s1.ubuntu.com>" and one include line "from=<root>". And this behavior appears that many times as many emails I will send. To be honest I am looking some pattern I could base. 2018-04-05 14:30 GMT+02:00 chaouche yacine <yacinechaou...@yahoo.com>: I was talking about collate.pl On Thursday, April 5, 2018, 12:04:45 PM GMT+1, Poliman - Serwis <ser...@poliman.pl> wrote: Yacine, do you say about collate.pl script or "from=" part from log file? I suppose that abotu script. If collate.pl could group by some id, it would be nice, because I would have only one line from log dependent from particular email sent. 2018-04-05 12:31 GMT+02:00 chaouche yacine <yacinechaou...@yahoo.com>: No it won't, it will simply group qids together so that you can trace individual e-mails, instead of having intermingled log lines from different e-mails. On Thursday, April 5, 2018, 7:10:11 AM GMT+1, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: > On Apr 5, 2018, at 2:07 AM, Poliman - Serwis <ser...@poliman.pl> wrote: > > Using collate.pl script I won't have to count "from=" from mail log, this > script merge it, am I right? Try it and see what you get. You may need to make some adjustments to the regular expressions depending on how your syslog formats the output, especially the date. -- Viktor. -- Pozdrawiam / Best Regards Piotr Bracha -- Pozdrawiam / Best Regards Piotr Bracha