> On Aug 14, 2018, at 10:50 AM, Tom Sommer <m...@tomsommer.dk> wrote:
>
> The message-id is not contained within <> in the log message but maybe that
> is correct, it just breaks logstash parsing but perhaps the parser is to
> blame.
The "<" and ">" characters are not added by Postfix, they are normally part
of the message-id value. In this case, the software that erroneously encoded
the message-id, also encoded (quoted-printable) the "<" and ">" characters.
The syntax of the cleanup log entry you're parsing is (typically):
{syslog-impl-specific} {postfix-instance}/cleanup[{pid}]: {queue-id}:
message-id={remote-message-id}
You can't rely on any particular syntax after the "message-id=".
--
Viktor.
