Den 2017-08-27 kl. 12:08, skrev Carlos E. R.:
On 2017-08-27 09:03, Bengt Gördén wrote:
Den 2017-08-27 kl. 01:26, skrev Jeffrey L. Taylor:
Quoting Mikhail Ramendik <mr@ramendik.ru>:
Hello,
I am running Leap 42.2.
Where can I find the postfix logs? I see that postfix is listening to port 25, and I know a local application is supposed to send something to port 25. I'd like to know what it sends (if anything), but there is no /var/log/maillog or anything like that.
journalctl -f
shows much/most/all the logging. You may be able to restrict it. The above does what I need. To see only postfix in a tail -f fashion
journalctl -f -u postfix.service
tail -f and since boot
journalctl -f --b -u postfix.service
tail -f and five days ago
journalctl -f --since '5 days ago' -u postfix.service
You could also do it with _UID journalctl -f _UID=`id -u postfix` Interesting.
But how would you extract everything from the "mail" "facility"? That is, everything that would go to /var/log/mail, irrelevant of what daemon or service produced it.
rfc3164 journalctl SYSLOG_FACILITY=2 Check with journalctl -N to see what fields that currently is used in the journal- Or checkout the last 10 entry's in verbose mode to see what you can filter out. journalctl -o verbose -n
As Carlos said you can install a syslog daemon and forward to that if you want. But I would also recommend start adapting to systemd and journald. Forgive my expressiveness, but bullshit! :-)
I might be. I'm really no black-belt in systemd/journal, just trying to walk the path of least resistance. :-D
You simply can not rely on journal to keep long term or large mail logs. It simply can not cope on any mail server.
By long term I mean at least two years worth of logs, which amounts to many gigabytes even on a small mail server.
Yes. You probably right there although I haven't seen any research about it. Do you know of any? I'm truly interested. I haven't tried with more than 2G logs and that is quite small.
Further, it is impossible with journal to adjust logs of, say, mail, to be rotated and compressed differently than the rest.
I've not tried all things yet but gradually I get there and hopefully will be able to get back and share my findings.
If you really want syslog change ForwardToSyslog in /etc/systemd/journald.conf and install the daemon. No need to edit/change anything. Just install the openSUSE daemon package.
Ok. That's good. regards, -- /bengan -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org