[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Logging of mail events from Postfix to syslog and rotation of the mail logs



Currently, I am running a Debian Sarge 3.1 as an MTA server using Postfix 
2.1.5-9.  My questions pertains to the logging of mail events from Postfix to 
syslog and rotation of the mail logs.

Postfix mail events are logged in both mail.log and syslog under /var/log/ at 
the moment, leaving me with nearly identical logs.  I'd rather conserve the 
space and designate only one log file for Postfix mail events (mail.log). 

Since the system log contains all of Postfix's logs, any other system messages 
are lost in the mail events when logcheck sends me it's reports.  I already 
use pflogsumm and awstats to analyze my email activity so I need to stop the 
mail events from being logged in syslog.  Can anyone show me how this can be 
done?

Below is my syslog.conf configuration.  Also, where do you specify when the 
mail.log files are rotated since it only keeps 7 days worth and I would like 
4 weeks worth?

#  /etc/syslog.conf     Configuration file for syslogd.
#
#                       For more information see syslog.conf(5)
#                       manpage.

#
# First some standard logfiles.  Log by facility.
#

auth,authpriv.*                 /var/log/auth.log
*.*;auth,authpriv.none          -/var/log/syslog
#cron.*                         /var/log/cron.log
daemon.*                        -/var/log/daemon.log
kern.*                          -/var/log/kern.log
lpr.*                           -/var/log/lpr.log
mail.*                          -/var/log/mail.log
user.*                          -/var/log/user.log
uucp.*                          /var/log/uucp.log

#
# Logging for the mail system.  Split it up so that
# it is easy to write scripts to parse these files.
#
#mail.info                      -/var/log/mail.log
mail.warn                       /var/log/mail.warn
mail.err                        /var/log/mail.err

# Logging for INN news system
#
news.crit                       /var/log/news/news.crit
news.err                        /var/log/news/news.err
news.notice                     -/var/log/news/news.notice

#
# Some `catch-all' logfiles.
#
*.=debug;\
        auth,authpriv.none;\
        news.none;mail.none     -/var/log/debug
*.=info;*.=notice;*.=warn;\
        auth,authpriv.none;\
        cron,daemon.none;\
        mail,news.none          -/var/log/messages

#
# Emergencies are sent to everybody logged in.
#
*.emerg                         *

#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
#daemon,mail.*;\
#       news.=crit;news.=err;news.=notice;\
#       *.=debug;*.=info;\
#       *.=notice;*.=warn       /dev/tty8

# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
# you must invoke `xconsole' with the `-file' option:
#
#    $ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
#      busy site..
#
daemon.*;mail.*;\
        news.crit;news.err;news.notice;\
        *.=debug;*.=info;\
        *.=notice;*.=warn       |/dev/xconsole



Reply to: