[syslog-ng] Logging every email into a separate log file

[Jakub Jankowski]

Wednesday 23 of November 2011 14:44:17 Dragan Zubac wrote:
> Is it possible to configure syslog-ng to log email logs in separate file
> for every email ?
>
> So an email is being processed,all lines in /var/log/mail.log for that
> particular email has a unique identifier,there might be some 5-15 lines
> for each email,is syslog-ng capable to log those lines per unique email
> ID into a separate log file,where a filename is generated on-the-file
> with some unique filename ?

If this unique ID is present in every line related to a particular mail, you 
can parse it (either with patterndb, or plain CSV parser - depends on your 
log lines format), extract the ID and use it as a macron in the destination 
filename. 
So, under certain conditions, yes - it is possible.

HTH

-- 
Jakub Jankowski|shasta at toxcorp.com|http://toxcorp.com/
GPG: FCBF F03D 9ADB B768 8B92 BB52 0341 9037 A875 942D