Virus and Quarantine Counts Contained in Separate Log - How Do I Add Them?

[wiskbroom]

All;

First, does anyone read email from this list?  I ask because this is now my fourth posting in a row, all of which I've never received a reply for :-(

Just in case, here goes:

I am sucessfully running mailgraph, wow it looks sweet! I've modified the mailgraph.cgi and init scripts so that I can run one daemon for each log file that I am parsing, a total of eight daemons for eight mail servers.  At some point I need to create a script to download the new mail logfiles, and parse them, each of my eight mailservers right now send their syslog data to a central host, which is where I am running mailgraph from.

Two issues:

1.  I am still running into a problem whereby my hostnames are in the HOSTNAME/HOSTNAME format, and mailgraph expects to see them in the HOSTNAME format. Any help there would be greatly appreciated, my perl is terrible.

2.   My other problem is  that in my setup, Postfix does not know when an email has been quarantined or flagged as a virus.  
Postfix hands off email to port 10022, whereby Trend VirusWall (actually IMSS) takes over, eventually handing it back to another Postfix listening on port 10023. In order to accurately report the total of quaratined emails and total number of viruses for a given day, I would have to somehow inject the results of a script which look like the following:

20080903 10 4 14

Looking at the results above, the first field would be the date in YYYYMMDD format.  

The second field would be the total number of quarantined email for the date in the first field.

The third  field would be the total number of viruses found for email for the date in the first field.

The fourth and last field would be the total of the sums contained for fields two and three.

(It would be difficult, and not worth my time, to add their times)

How, if at all possible, can I inject this data into my RRD graphs for virus and quarantine info?


Many thanks to all in advance,

.Vadim



--
Unsubscribe mailto:mailgraph-request@...?subject=unsubscribe
Help        mailto:mailgraph-request@...?subject=help
Archive     http://lists.ee.ethz.ch/mailgraph
WebAdmin    http://lists.ee.ethz.ch/lsg2.cgi

[Ralf Hildebrandt]

* wiskbroom@... <wiskbroom@...>:
> All;
>
> First, does anyone read email from this list?  I ask because this is
> now my fourth posting in a row, all of which I've never received a
> reply for :-(

I do.
 

> Just in case, here goes:
>
> I am sucessfully running mailgraph, wow it looks sweet! I've modified
> the mailgraph.cgi and init scripts so that I can run one daemon for
> each log file that I am parsing, a total of eight daemons for eight
> mail servers.  At some point I need to create a script to download the
> new mail logfiles, and parse them, each of my eight mailservers right
> now send their syslog data to a central host, which is where I am
> running mailgraph from.
>
> Two issues:
>
> 1.  I am still running into a problem whereby my hostnames are in the
> HOSTNAME/HOSTNAME format, and mailgraph expects to see them in the
> HOSTNAME format. Any help there would be greatly appreciated, my perl
> is terrible.

You could pipe them through sed to replace HOSTNAME/HOSTNAME with just
HOSTNAME!

--
Ralf Hildebrandt (i.A. des IT-Zentrums)         Ralf.Hildebrandt@...
Charite - Universitätsmedizin Berlin            Tel.  [phone]
Gemeinsame Einrichtung von FU- und HU-Berlin    Fax.  [phone]
IT-Zentrum Standort CBF                              I'm looking for a job!

--
Unsubscribe mailto:mailgraph-request@...?subject=unsubscribe
Help        mailto:mailgraph-request@...?subject=help
Archive     http://lists.ee.ethz.ch/mailgraph
WebAdmin    http://lists.ee.ethz.ch/lsg2.cgi

[wiskbroom]

Thank you Ralf, that is an excellent idea, just not sure how I could make it work.

I suppose this might work:

        mailgraph.pl -l `sed 's/mailserver.example.com\/mailserver.example.com/mailserver.example.com/' /var/log/maillog` -d --daemon-pid=$PID_FILE --daemon-rrd=$RRD_DIR

Has anyone tried it?  Otherwise, I'll try tomorrow and let you all know.

What I would like to do is simply modify, assuming that is all I need to modify, the following line to double the hostname entry:

            \s
            ([-\w\.\@:]+)        # host  -- 6
            \s+

Thanks again,

.vp

> Date: Thu, 11 Sep 2008 20:45:17 +0200
> From: Ralf.Hildebrandt@...
> To: mailgraph@...
> Subject: [mailgraph] Re: Virus and Quarantine Counts Contained in Separate Log - How Do I Add Them?
>
> * wiskbroom@... <wiskbroom@...>:
> > All;
> >
> > First, does anyone read email from this list?  I ask because this is
> > now my fourth posting in a row, all of which I've never received a
> > reply for :-(
>
> I do.
>  
> > Just in case, here goes:
> >
> > I am sucessfully running mailgraph, wow it looks sweet! I've modified
> > the mailgraph.cgi and init scripts so that I can run one daemon for
> > each log file that I am parsing, a total of eight daemons for eight
> > mail servers.  At some point I need to create a script to download the
> > new mail logfiles, and parse them, each of my eight mailservers right
> > now send their syslog data to a central host, which is where I am
> > running mailgraph from.
> >
> > Two issues:
> >
> > 1.  I am still running into a problem whereby my hostnames are in the
> > HOSTNAME/HOSTNAME format, and mailgraph expects to see them in the
> > HOSTNAME format. Any help there would be greatly appreciated, my perl
> > is terrible.
>
> You could pipe them through sed to replace HOSTNAME/HOSTNAME with just
> HOSTNAME!
>
> --
> Ralf Hildebrandt (i.A. des IT-Zentrums)         Ralf.Hildebrandt@...
> Charite - Universitätsmedizin Berlin            Tel.  [phone]
> Gemeinsame Einrichtung von FU- und HU-Berlin    Fax.  [phone]
> IT-Zentrum Standort CBF                              I'm looking for a job!

--
Unsubscribe mailto:mailgraph-request@...?subject=unsubscribe
Help        mailto:mailgraph-request@...?subject=help
Archive     http://lists.ee.ethz.ch/mailgraph
WebAdmin    http://lists.ee.ethz.ch/lsg2.cgi