SpamFilterISP Log Parsing |
Post Reply ![]() |
Author | |
Desperado ![]() Senior Member ![]() ![]() Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
![]() ![]() ![]() ![]() ![]() Posted: 12 April 2005 at 12:41pm |
All,
For those who have not read the previous posts on log parsing, I have been using "Sawmill" (http://www.sawmill.net) to parse my logs. Sawmill has many, many log types that it can parse and for those of us that can't leave well enough alone, it is very customizable. I have re-written the "Log File Format" filter to match up with the latest SpamFilter log format and the folks at Sawmill have included it in their latest build.
I mention this because, as you know, statistics of the SpamFilter database only expose what is in the quarantine "now", and also doesn't contain any of the very useful information that the SpamFilter logs keep track of. This has become a "can't live without" tool for us. It is well worth taking a look at.
My latest filter (For Sawmill Version 7) can be retrieved at http://spamman.mags.net/sawmill/logsat_spam_filter_isp.cfg
(updated cfg 04-19-2005)
Regards, Edited by Desperado |
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
![]() |
|
Tom ![]() Guest Group ![]() |
![]() ![]() ![]() ![]() ![]() |
Hi, I have tried to to use sawmill to analyse my logs, but i always got the error "no log format detected" (also with your new version mentioned above). I am using WinXP pro. plse help ... |
|
![]() |
|
Desperado ![]() Senior Member ![]() ![]() Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
![]() ![]() ![]() ![]() ![]() |
What version of SawMill and what plug-in version?
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
![]() |
|
Tom ![]() Guest Group ![]() |
![]() ![]() ![]() ![]() ![]() |
SawMill 7.2.1 Spamfilter ISP 2.7.1.511 I do not know what you mean with plug-in version. I have downloaded SawMill yesterday so it has to be the newest one. |
|
![]() |
|
Desperado ![]() Senior Member ![]() ![]() Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
![]() ![]() ![]() ![]() ![]() |
Tom, Please check the file "logsat_spam_filter_isp.cfg". The first couple of lines should read: logsat_spam_filter_isp = { # The name of the log format # Updated to match new log entries - Dec-30-2005 Dan Seligmann, Mags Net, LLC log.format.format_label = "LogSat SpamFilterISP Log Format B500.8" Regards, |
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
![]() |
Post Reply ![]() |
|
Tweet
|
Forum Jump | Forum Permissions ![]() You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.172 seconds.