On Wed, May 28, 2003 at 09:02:22AM -0500, Tom Meunier wrote:
> He wants to parse his maillog file to throw away everything but the "processing > message <message_id> and the "identified spam" lines. Then he can go back and look > at <message_id> for troubleshooting purposes. He has a feeling that he can't count > on the "identified spam" line always immediately following the "processing message" > line. So far you're right 101% He'd like to throw away everything but those two lines. Basically, I guess he's asking for a report in the format: > > "Identified spam (29.6 points) in message <[EMAIL PROTECTED]>" More in the line of Identified spam (29.6 points) to user <[EMAIL PROTECTED]> from addres <[EMAIL PROTECTED]> and maybe even report this to the user. Manglement would receive a summary, tagged 12345 out of 98765 messages, here's the top 25. The problem is, like someone else agreed, it isn't always simple to find matching "processing message <xyz>" and "identified spam". Hence my second question, is there a reason the message ID isn't reported together with the result line. cheers, Alex ------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk