ons, 28.05.2003 kl. 16.02 skrev Tom Meunier: > I think I know what he means, because I've considered the same thing myself, for a > moment or two. > > He wants to parse his maillog file to throw away everything but the "processing > message <message_id> and the "identified spam" lines. Then he can go back and look > at <message_id> for troubleshooting purposes. He has a feeling that he can't count > on the "identified spam" line always immediately following the "processing message" > line. He'd like to throw away everything but those two lines. Basically, I guess > he's asking for a report in the format: > > "Identified spam (29.6 points) in message <[EMAIL PROTECTED]>" > ... > ... > ... (more of same) > > Fair disclosure: Idunno how to do that.
Ah. I haven't got that far with Postfix, yet. With Exim's logs, I use short self-written Korn shell scripts to do that sort of thing. Exim writes logs which have completely different - far simpler to parse - and more straightforward syntax than Postfix. Unless one's running Exim in some degree of debug mode. Tony -- Tony Earnshaw <[EMAIL PROTECTED]> ------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk