cat zimbra.log

[txerra]

Hi
I would like to extract from zimbra.log file, something like this:

datetime /Email from / email to / email status ( sent or whatever ) / in not sent message error

Is there any script for that (zmmsgtrace has too many info ).


thank you in advance.

[jorgedlcruz]

Hi txerra,
Or you apply some grep to your tail, or you use an external log system like graylog, or Elasticsearch, etc. Then you will be able to filter better.

Best regards

[txerra]

Hi Jorge
thank you

but, is there something common in all the traces of an email. ( something like message-id o something like that).
I think that always the first trace starts with: mail postfix/smtpd[75762]: NOQUEUE: filter: RCPT from

But, how can I know where is the last trece of this email?

I say something like
starts emailid xxx
...
...

..
ends emailid xxx


thank you Jorge.

[Raun]

Hi Txerra,

zmmsgtrace can help you trace a message from sender or receiver . I know this may not be what you are looking for but just putting it here in case you find it useful

zmmsgtrace [options] [<mail-syslog-file>...]

--id|i "msgid" # case sensitive regex
--sender|s "user@domain" # case insensitive regex
--recipient|r "user@domain" # case insensitive regex
--srchost|F "hostname_or_ip" # case insensitive regex
--desthost|D "hostname_or_ip" # case insensitive regex
--time|t "start_ts,end_ts" # YYYYMM[DD[HH[MM[SS]]]]
--year "YYYY" # file year if no YYYY in file
--nosort # do not sort @ARGV files by mtime
--debug verbose output useful for debugging
--help display a brief help message
--man display the entire man page

Where:
<mail-syslog-file> defaults to "/var/log/zimbra.log"

Files ending in '.gz', '.bz' or '.bz2' will be read using gzip or
bunzip2.