zimbra.log does not record all send and receive events

[HelderSR]

Good morning,

I send an email and it arrives at the recipient, but it does not register in the log. Other sends and receipts he registers.

We have over 20,000 users.

Is there some cache or queue to grow and have the system write all events to the zimbra.log?

[jhurley]

In a Default configuration, the server will write logging for different steps of the sending and delivery process within the mailbox.log and zimbra.log logs of the server which processed the message. You stated that you have 20,000, users, so you may be reviewing the zimbra.log of the mailstore, not the MTA that processed the message?

On the mailbox server within the mailbox.log you should see logging like the following for sending a message

2023-05-19 13:49:00,204 INFO [qtp252651381-257876:https://mail.mailbox-server.com/service ... MsgRequest] [name=sender@domain.com;mid=9;oip=xxx.xx.xx.xx;port=43188;ua=ZimbraWebClient - GC111 (Mac)/8.8.15_GA_4508;soapId=4c870819;] smtp - Sending message to MTA at mail.domain.com.com: Message-ID=<2062680696.206.1684518540145.JavaMail.zimbra@domain.com>, replyType=r, sender=sender@domain.com, nrcpts=1, to=recipient@domain.com


Take the message-ID and grep the zimbra.log of the MTA server to find the server that processed the message.

grep 2062680696.206.1684518540145 zimbra.log

You will receive a number of logging lines of the message being processed but will need to take the postfix ID numbers to locate the LMTP/SMTP "Send" to the mailbox server response or view the log. It will resemble:

May 19 13:49:01 mail postfix/lmtp[3721242]: 107D6404F8: to=<recipient@domain.com>, relay=mb2.hostname.com[xx.xx.26.11]:7025, delay=0.2, delays=0.01/0.01/0.1/0.08, dsn=2.1.5, status=sent (250 2.1.5 Delivery OK)


Then go to the mailbox server to locate the receiving of the message.

2023-05-19 13:49:01,233 INFO [LmtpServer-70] [ip=xx.xxx.26.10;] lmtp - Delivering message: size=15867 bytes, nrcpts=1, sender=sender@domain.com, msgid=<2062680696.206.1684518540145.JavaMail.zimbra@domain.com>
2023-05-19 13:49:01,246 INFO [LmtpServer-70] [name= recipient@domain.com;mid=8;ip=xxx.xxx.26.10;] mailop - Adding Message: id=257, Message-ID=<2062680696.206.1684518540145.JavaMail.zimbra@domain.com>, parentId=-1, folderId=2, folderName=Inbox acct=9a06063a-3df6-490d-9739-19375c7e3308.

[HelderSR]

Two emails were sent at different times, both arrived in the recipient's box, however,
in zimbra.log there is only one shipment as shown in the image.

[jhurley]

Code: Select all

Two emails were sent at different times, both arrived in the recipient's box

Since they are different messages they will have different message-id. You can obtain the message-id by locating the message-id within the message list pane, right-clicking on the messages, and selecting show original. A window will pop up with the raw message where you can obtain the message-id

[HelderSR]

Good night.

The codes (message-id) are different according to the second image. Each code refers to an email.

The e-mail of the time 9:44 is sent in zimbra.log.

Already the e-mail of the time 9:25 does not appear the sending in zimbra.log

[jhurley]

Did you find an LMTP entry within the mailbox.log for the message in question or was there a create request?
For some clients, if you drag and drop a message from an archived folder or from a different account, the client will sync the message back to the server.
In this instance, the mailbox.log will have the logging of the create message but the zimbra.log will not.