Just curiously Jake, how often do you really find yourself reading that 1M log file you get every day?
I've been there and found they get auto sorted into a "Logs" folder only to be deleted (still unread) when Outlook slows down. > Peter Peltonen wrote: >> By "how many old logs" you mean "how many old log entries"? >> >> I doubled the default values, lets see what happens. For >> rotating/storing the old logs most useful would be if I could just >> define that I could store the log entries say for past 2 days, but I >> guess I can try to find out the correct values by trial and error... >> >> >> > > It's how many old files, IIRC. Here's the definition: > http://wiki.qmailtoaster.com/index.php/Logcount >> >> >> That snippet was from the send log: >> >> 2009-06-23 12:39:34.728647500 starting delivery 108413: msg 2232131 to >> remote [email protected] >> >> I tried to find the sender from the send log by searching the strings >> 2232131 and 108413 with no success. Maybe that piece of information >> was already wiped from the log? >> >> >> > > Then look in the smtp log and correlate the two. Since each and every > part of Qmail is a separate daemon (which is part of it's security and > stability), each part logs in it's own log file. I guess you could > combine them, but I find that 99% of the time I'm only working in the > smtp log - very rarely do I need to look at any of the other logs. > Unfortunately this modularity also makes tracing in the logs difficult. > >>> Configure logwatch to send you emails. I get a nice 1M email from my >>> server >>> every day with log errors. You can trim and tune it as you see fit. >>> >> >> Could you share your logwatch config for us? >> >> > > I can, but I believe that if you just define you address in your > /usr/share/logwatch/default.conf/logwatch.conf file it will send you > want you want. I've never really tuned it (read: I'm lazy) to filter out > stuff I don't want to see so I have not customized it much. > >
