Print Page | Close Window

Log Parsing and Reporting

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6709
Printed Date: 26 December 2024 at 9:08pm


Topic: Log Parsing and Reporting
Posted By: brianoakes
Subject: Log Parsing and Reporting
Date Posted: 13 July 2009 at 11:43pm
Howdy,
 
I haven't seen a clear suggestion on what might be used for parsing the activity logs, does any one have any suggestions?
 
Long term I'd love the logs in a db, where I can get a web interface to search to see why things are blocked etc. Any pointers?
 
Thanks!


Replies:
Posted By: yapadu
Date Posted: 14 July 2009 at 11:47am
While I am still working with it, the software everyone here uses is:

http://www.sawmill.net/ - http://www.sawmill.net/

Posted By: Neolisk
Date Posted: 17 July 2009 at 10:57am
That's weird! I went to SpamFilterISP samples page and saw nothing!

http://samples.sawmill.net/cgi-bin/sawmill/sawmill.cgi?dp=reports&p=spamfilterisp_sample&webvars.username=samples&webvars.password=sawmill - http://samples.sawmill.net/cgi-bin/sawmill/sawmill.cgi?dp=reports&p=spamfilterisp_sample&webvars.username=samples&webvars.password=sawmill

Is it just me?

Posted By: yapadu
Date Posted: 17 July 2009 at 1:28pm
Their sample site seems to be down, this is what it give me:

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator,
 sawmill@flowerfire.com and inform them of the time the error occurred,
and anything you might have done that may have
caused the error.</p>
<p>More information about this error may be available
in the server error log.</p>
<hr>
<address>Apache/2.2.3 (CentOS) Server at samples.sawmill.net Port 80</address>
</body></html>

Posted By: Neolisk
Date Posted: 17 July 2009 at 1:39pm
Here's what I get:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type></HEAD>
<BODY><PRE></PRE></BODY></HTML>

Which is really an empty page, if you look through the tags.

Posted By: brianoakes
Date Posted: 20 July 2009 at 7:30pm

Thanks for the links guys. I put the SpamFilter in front of my barracuda. We have over 700,000 emails per day, so this helps cut down what the cuda's can handle. What I was hoping was I could take the logs from the SpamFilter and get the same type of log filtering at I can on the cudas. Sometimes we have to research why a message was dropped and adjust.

Has anyone whipped a web interface?

Posted By: Neolisk
Date Posted: 21 July 2009 at 9:37am
Barracuda is inferior to SpamFilter, as it doesn't filter spam on connection level. At least, that's what I heard of it.

You can enable quarantine DB and decide which emails you want to save (by rejected error code). But normally you wouldn't need it. We're up for about a week and there seem to be no false positives so far.


Print Page | Close Window