> On 14 Aug 2018, at 16.57, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote:
>
>
>
>> On Aug 14, 2018, at 10:50 AM, Tom Sommer <m...@tomsommer.dk> wrote:
>>
>> The message-id is not contained within <> in the log message but maybe that
>> is correct, it just breaks logstash parsing but perhaps the parser is to
>> blame.
>
> The "<" and ">" characters are not added by Postfix, they are normally part
> of the message-id value. In this case, the software that erroneously encoded
> the message-id, also encoded (quoted-printable) the "<" and ">" characters.
>
> The syntax of the cleanup log entry you're parsing is (typically):
>
> {syslog-impl-specific} {postfix-instance}/cleanup[{pid}]: {queue-id}:
> message-id={remote-message-id}
>
> You can't rely on any particular syntax after the "message-id=".
Thank you for clarifying, I will adjust the parser.
.. And sorry for top-posting before, I blame the phone.
