|
About / News Features Download Documentation Support Contact ScreenShots Help support SendmailAnalyzer!
|
The Sendmail/Postfix log analyzerSendmailAnalyzer as is name suggest is a free Sendmail/Postfix log analyzer. It process maillog files and generate dynamic statistics in HTML and graphical output. The reports are generated in real time so that it let you know at any moment what is going on your mail servers. It use time (hour, day, month and year views) and cross-linked navigation for easy use. SendmailAnalyzer is easy to install and highly configurable to match the dozen of Sendmail possible configurations. It also support report for all the major milter or sendmail filters like SpamAssassin, MailScanner, Clamav, Amavis, RBL check, J-ChkMail, etc. SendmailAnalyzer is really helpful for IT reporting. Collected data are stored in flat files that are automatically archived or delete to keep disk space. All reports before the current day are cached to save system resources and are displayed in less than 1 second. SendmailAnalyzer can be run on a home dedicated mail server, on multiple enterprise mail servers and on ISP mail servers for free. A single instance of SendmailAnalyzer can be used to monitor multiple sendmail server throught rsyslog. Since version 6.2 multiple rsyslog host report can be merge in a single report. This is the most advanced and complete statistics tool dedicated to the great Sendmail MTA. It's goal is not to support any kind of MTA or other log format but only being a full featured tool for Sendmail users and administrators. If you're searching something more general and not free take a look at SawMill, it's not so bad :-) NewsVersion 9.2 - Sunday January 17 2016This release fixes some bugs reported since last release and adds several additional milters and useful features.
* All column in detailed views are now sortable.
* Add support to systemd journalctl with the JOURNALCTL_CMD configuration
directive or the -j command line option.
* Allow parsing of log files coming from multiple host.
* Add support to postfix clamsmtpd virus and spampd detection.
* Add report of subject in detailed view when available in log file.
* Add date before hour in the detailed report.
* Add explanation about how to rebuild reports in documentation.
There's also new command line parameters or configuration directive:
* Add -j | --journalctl command line option to specify the journalctl command
* Add -F | --force command line option to be used instead of -f | --full to
parse full log file without taking care of the history file LAST_PARSED.
This is useful if you always have log files with fresh entries and log
files coming from multiple host. Before that you had to remove the
history file before parsing a new log.
Here is the full list of change and credits:
- Update de_DE translation file. Thanks to Wolfgang for the patch.
- Fix wrong ExecStop command. Thanks to fmalfatto for the patch.
- Add sorttable.js javascript to be able to sort on each column in detailed
views. Thanks to Siervo Andrey Amado Benavides for the patch.
- Fix systemd start script
- Allow yyyy-mm-dd hh:mm:ss in history timestamp for journalctl together
with iso format: yyyy-mm-ddThh:mm:ss.
- Prevent redefining --since journalctl option if it is already given in
JOURNALCTL_CMD or --journalctl.
- Add documentation about JOURNALCTL configuration directive and the -j or
--journalctl command line option.
- Fix command line option in uppercase and not.
- Fix wrong status and spam rule for spam rejected by eXpurGate milter.
Thanks to Tiyma Ahmed for the report.
- Fix Postfix/Amavis discarded spam and virus that appears with status sent.
Thanks to Miquel Angel Daniel Veny for the report.
- Fix long spamassassin messages that are not detected as spam by sendmail
analyzer. Thanks to Stefan Berger for the patch.
- Add information about the FORCE configuration option and -F command line.
- Add -F | --force command line option to be used if you always have log
files with fresh entries and log files coming from multiple host. Thanks
to Sladjan Andjelic for the feature request.
- Update Debian package and documentation in packaging/README. Thanks to
Nicolas Quiniou-Briand for the report.
- Update copyrights.
- Fix start script, it was not killing off the process, added -s kill. Thanks
to Gary McLean for the patch.
- Add support to sendmail milter with subject rewriting.
- Fix an other issue in message delivery direction. Thanks to Gary McLean for
the report.
- Add date before hour in the detailed report.
- Add date with hour to the CSV details file output. Thanks to Tsioritafita
Rajahanisainana for the report.
- Remove --duplicate option, it is too much confusing. Fix case where SA
doubled recipient entries with the same message-id but not the same MTA id.
- Fix postfix double delivery by using "queued as" and "orig_queue_id".
- Fix case where sender relay was not checked against LOCAL_DOMAIN to find
mail incoming direction. Thanks to Kulikov Dmitrii for the report.
- Fix case to avoid double when postfix send the message locally to a plugin.
- Change MTA_NAME default value to add spampd: sm-mta|sendmail|postfix|spampd
- Add support to postfix clamsmtpd virus and spampd detection. Thanks to
Zdenek Zamecnik for the feature request.
- Add subject field to CSV download.
- Add report of subject in detailed view when available in log file. Thanks
to Tsioritafita Rahajanisainana for the feature request.
Version 9.1 - Sunday April 19 2015This release fixes one year of reported issues, adds several additional milters and useful features.
* Add CSV export of top senders and recipients as well as search results.
* Add STARTLS status report in the Status report.
* More translation file: Russian and Italian.
* Add DSN report for postfix log.
* Add support to Exim log file.
* Add support to milter-limit reported in Top Rejection & Events report
with status starting with "has exceeded ...".
* Improve incremental mode by seeking directly to last parser position
in the logfile after last run. It will also auto detect file rotation
and fall back to the start of the file when the file has changed.
* Add postfix warning into SysErr reports.
* Add support to spampd spam detection.
* Add information about settings for sendmailanalyzer into systemd service.
* Add ruleset=check_relay with reject=550 5.7.1 to the spam reports.
There's also new command line parameters or configuration directive:
* --duplicate command line option to use to fix a bad Postfix behavior
which use different MTA id per recipient for a single message. Note that
when enabled, you will not see messages with multiple recipient.
* Add new configuration directives EXCLUDE_FROM, EXCLUDE_RELAY and EXCLUDE_TO
to not report emails from/to the specified list of senders/recipients or
from senders relay.
* Add WEEKLY_FREE_SPACE configuration directive to force sa_cache to archive
or remove data file each weeks instead of default per month.
Here is the full list of change and credits:
- Detailed views are now also downloadable as CSV file. Thanks to Tsioritafita
Rahajanisainana for the feature request.
- Fix computation of starttls graph. Thanks to MAYER Hans for the report.
- Allow download of Top senders and recipients in CSV format from a link [csv]
after the column header. Thanks to Tsioritafita Andre Rolly Rahajanisainana
for the feature request.
- Add russian translation. Thanks to sef1976 for the patch.
- Add --duplicate command line entry to fix a bad Postfix behavior which use
different MTA id per recipient for a single message. Note that when enabled
you will not see messages with multiple recipient. Thanks to Olivier Zolli
for the report.
- Add STARTLS status report. Thanks to Hans Mayer for the feature request.
- Fix documentation about MAIL_GW and MAIL_HUB where ip addresses must be
used instead of DNS name. Thanks to Roger for the report.
- Fix comment to MAIL_GW and MAIL_HUB where ip addresses must be used instead
of DNS name. Thanks to Roger for the report.
- Remove rejected mail from top senders statistics. Thanks to Michal Paulus
for the report.
- Add DSN report for postfix log. Thanks to Wolfgang for the feature request.
- Fix DNSBL entries are missing if the from=<>. Thanks to Olivier Zolli for
the patch.
- Update configuration file in debian directory.
- Add Italian translation file. Thanks to Luca Sasdelli for the patch.
- Fix unrecognized virus infection log report produced by amavis-new. Thanks
to Olaf Menzel for the report.
- Fix case where incoming message was not counted in messaging flow.
- Fix spamd sendmail parser, some messages was lost. Thanks for Sir Y Dog
for the report.
- Remove README.RPM from slackBuild, the file no longer exists. Thanks to
Syr Y Dog for the report.
- First work on adding support to Exim log file.
- Add new configuration directives EXCLUDE_FROM, EXCLUDE_TO and EXCLUDE_RELAY
to not report emails from the specified list of senders or senders relay.
Thanks to Dave Wreski for the feature request.
- Fix rejection Top status with Domain of sender address....
- Fix Top DSN wrong report count. Unknown senders are marked as unknown.
Thanks to Paul Cantle for the report.
- Fix Top DSN details reports. Thanks to Paul Cantle for the report.
- Fix enhdnsbl rejection, they should be reported as DNSBL spam now. Thanks
to Piotr Bodnar for the report.
- Limit Top rejection status to any text before : character.
- Fix some status cleanup.
- Add support to milter-limit. Will be shown in Top Rejection & Events report
with status starting with "has exceeded ...". Thanks to Juan Carlos Sanchez
for the feature request.
- Fix missing sender relay when no DNS name was appended in front. Thanks to
Juan Carlos Sanchez for the report.
- Exclude authid single message from System messages report.
- Add aggregating of STARTTLS error.
- Fix a possible case where Amavis Hits score was not stores.
- Make systemd happy with sendmailanalyzer.pid file. Thanks to Piotr Bodnar
for the report.
- Test log file size before seeking in incremental mode.
- Accelerate incremental mode by seeking directly to last position of the
parser in the logfile after last run. It will also auto detect file rotation
and fall back to the start of the file when the file has changed.
- Some documentation fixes. Thanks to Igor Vuk for the patch.
- Add WEEKLY_FREE_SPACE configuration directive to force sa_cache to archive
or remove data file each weeks instead of default per month. This will help
saving space on huge MTA.
- Fix summarization of some status messages.
- Add error message when the archive command can not be achieved.
- Add postfix warning into SysErr reports. Thanks to Mathieu Chateau for the
feature request.
- Add support to spampd spam detection. Thanks to Thibaut Varene for the
feature request.
- Recalculate current time at each line to compare log entry with current date
to search the year used in the log file.
- Add information about settings for sendmailanalyzer into systemd service.
Thanks to fmalfatto for the report.
- Add ruleset=check_relay with reject=550 5.7.1 to the spam reports. Thanks
to Ricardson Williams for the report.
UPGRADE: You need to reinstall all file and rebuild your configuration file from the new default configuration file. Data files do not need to be remove, backward compatibility is preserved. Version 9.0 - Saturday March 15 2014This is a major release with lot of major enhancements and a full year of bugs fixes. There is a complete remove of dependency to libgd and GD::Graph* Perl modules, graphs are now drawn using the flotr2 javascript library. It adds support to ipv6 addresses, a new week view in the calendar menu. It also restores reports on postgrey and adds support to policyd-weight, sqlgrey and maiad plugins. A new directive EXCLUDE_TO to be able to exclude some destination addresses from reports and new Brazilian Portuguese translation file pt_BR. - Fix click on flotr2 graph and update javascript file. - Fix issue when parsing logs with [ID 801593 mail.notice] field. Thanks to Hans Mayer for the report. - Fix display of month instead of minutes of the hour in graphs. Thanks to Alain Deleglise for the report. - Add support to sqlgrey output. Report will be added under the Postgrey menu. POSTGREY_NAME set by default to postgrey|sqlgrey. Thanks to Dave Wreski for the feature request. - Restore and fix postgrey statistics that was broken since 8.1. - Add new directive EXCLUDE_TO to be able to exclude from reports some destination addresses. Thanks to Bo Larsson and Dave Wreski for the feature request. - Replace value of AMAVIS_NAME configuration directive with: amavis|maiad - Fix parsing of maiad spam/virus report. Thanks to breakaway for the report. - Fix rpmlint bogus date warning. Thanks to Igor Vuk for the patch. - Remove a rogue tab character from .spec, add pt_BR translation. Thanks to Igor Vuk for the patch. - Change the README and --help output to match the default DELAY value. Thanks to Igor Vuk for the patch. - Change DELAY description to match the default value of 5 seconds. Thanks to Igor Vuk for the patch. - Add support to postfix/policyd-weight antispam. Thanks to Michael Seevogel for the feature request. - Change all instances of 'coma' to 'comma'. Thanks to Igor Vuk for the patch. - Fix report of SASL SMTP AUTH. Thanks to Michael Seevogel for the report. - Fix some errors in cron lines. Thanks to Dominique Fournier for the patch. - Add debian repository to allow building deb package with "dpkg-buildpackage -rfakeroot" and remove the old repository packaging/debian/. Thanks to Dominique Fournier for the patches. - Remove reference to GD::* perl modules, they are no more used. - Add SPAMD_NAME details to documentation. - Add SPAMD_NAME directive to default configuration file. - Add --spamd explanation to usage. - Add Brazilian Portuguese translation. Thanks to Paulino Michelazzo for the translation patch. - Fix the double entries generated by some postfix plugins. Thanks to Alain Deleglise for the report. - Fix spam details in amavis parser. - Fix some syserr message and remove report of virus from the Messaging Status report page. - Add spam details detected by spamd into Spamd-Milter report. - Remove Spam from the Messaging Status report. - Fix percentage of Other in Messaging status report. - Fix several minors bugs and add support to clamav-milter with postfix. Thanks to Dominique Fournier for the feature request. - Fix unparsed spamd virus detected line when the autolearn field is not just after the mid field. Thanks to Marcio Veloso for the report. - Add support to ipv6 addresses. Thanks to Dominique Fournier for the feature request. - Change french internal direction translation from Grp to Int. - Remove set direction about uucp like localhost. - Update spec file with new and removed files. - Add +doc/sa_cache.pod and removed -doc/sendmailanalyzer.3 - Add sa_cache cron job documentation on doc/sa_cache.pod and remove man page from git repo as they are automatically generated at install. - Add missing doc/sa_cache.pod file. Thanks to Javier Ariznabarreta for the report. - Fix double count of postfix messages sent when email "path" would be this: Internet -> spamd -> postfix -> amavisd -> uucp mailbox -> uucp pickup -> Exchange. Thanks to Javier Ariznabarreta for the report. - Fix pie graph with other status report. - Add uucp relay as internal delivery - Change WeekDay translation that should start with Sunday. - Cosmetic change to graphs. - Fix cleanup of RBL rejection message. - Fix major bug with number of senders and recipient. - Add some cosmetic change to calendar menu. - Add week view on calendar menu. - Remove GD perl modules from requirements as well as tje TTFONT configuration directive. - Remove obsolete file cgi-bin/grafit.cgi from source tree. - Replace the use of GD::Graph Perl library by the flotr2 javascript graphic library. - Remove the use of space HTML escaping in language files (%20), they were used with the obsolete GD::Graph Perl library. - Update documentation about URL_JSCRIPT. - Add URL_JSCRIPT to specify default url to the flotr2 javascript library. Add auto install of flotr2.js. - Add flotr2 javascript library to build graphs. - Fix broken HTML code on auth mechanism report. - Fix recipient relay with Postfix. Thanks to Walter Huf for the patch. - Do not delete an entire message record just because one of the recipients goes to a skipped relay. Thanks to Walter Huf for the patch. - Remove some posfix debug or info messages from rejection reports. - Clear extra information from DNSBL spam detail report. - Force vertical alignment on top of columns on Top Statistics. - Remove some postfix/postscreen information from reject report. Thanks to daks-ua for the report. - Fix case where recipients were not stored with amavis spam and virus detection. - SA will now show top recipients in topvirus view even if they was not sent. - remove temporary debug information. - Fix case where amavis spam details was not collected. Thanks to grufo for the report. - Fix documentation about Postfix that is no fully supported. Thanks to Comprax for the report. - Fix case where virus with Amavis and clamd are reported twice. Thanks to Paul Cantle for the report. - Renamed PID_FILE directive into PID_DIR to be less confusing and fix default path, backward compatibility with old configuration file is preserved. Thanks to Thomas Merlin for the report. - Reorder command line options in usage() display. - Fix case where log line can appear in the future to sendmailanalyzer with automatically subtracts one year if sendmailanalyzer detect that the date is in the future from the time it is run or the date from the LAST_PARSED file. Thanks to Damian Lukowski for the report. - Add the -y | --year command line option that can be use to force the year of the log as syslog doesn't log the year in the date on most distribution. - sa_report.cgi has also been modified to add default current year in the select box if not present as it always goes to the current day by default. - Improve speed of incremental_check() function. - Add man page for sa_cache. Thanks to Lars Vogdt for the patch. UPGRADE: You need to reinstall all file and rebuild your configuration file from the new default configuration file. Data files may not need to be remove, backward compatibility should be preserved. |
|---|
Copyright (c) 2002-2015 Gilles Darold - All rights reserved. (GPL v3).