logcheck — amavisd-new filter

Posted on .

Tested using Debian 7 Wheezy. To be added to /etc/logcheck/ignore.d.server/

With javascript enabled, the above regex block has a toolbar with a copy-to-clipboard button.

I have quite a few of these custom filters, I’ll post some more at another time.

One thought on “logcheck — amavisd-new filter

  1. Guillaume

    I now have this for the first line:

    ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed (CLEAN|SPAM(MY)?) {Relayed(Inbound|Internal|OpenRelay)},( LOCAL)?( \[[[:xdigit:].:]{3,39}\](:[[:digit:]]{4,5})?){0,2} ]*> -> ]*>(,]*>)*,( Queue-ID: [[:xdigit:]]{11},)?( Message-ID: ]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,)?( Resent-Message-ID: ]+>,)? mail_id: [-+_[:alnum:]]+, Hits: (-?[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as: [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$


Leave a Reply

You may leave the Name and Email fields blank to post anonymously.