Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Pattern for smtp / PIX workarounds missing? #157

Closed
ulab opened this issue Jul 29, 2021 · 2 comments · Fixed by #164
Closed

Pattern for smtp / PIX workarounds missing? #157

ulab opened this issue Jul 29, 2021 · 2 comments · Fixed by #164

Comments

@ulab
Copy link
Contributor

ulab commented Jul 29, 2021

I am not using the patterns directly in logstash, but tried to re-create them for direct ingest streams. So I am not sure if I might have missed a pattern, but I just stumbled over this where the GROKs did not match:

Jul 29 08:48:33 mx-out-01 postfix/smtp[9833]: B0ADE20FC7: enabling PIX workarounds: disable_esmtp delay_dotcrlf for example.com[93.184.216.34]:25
@whyscream
Copy link
Owner

The patterns are meant to extract useful data points from the log stream. If no one is interested in the fact that the PIX workarounds are triggered for certain hosts, there won't be a pattern for that. No one ever put in a request, until now :)

@ulab
Copy link
Contributor Author

ulab commented Jul 29, 2021

I just thought it might be useful to find when you filter for the Queue-ID, IP or client. :)

@whyscream whyscream mentioned this issue Jul 25, 2022
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

SMTP pix workarounds whyscream/postfix-grok-patterns
2 participants
@ulab @whyscream