Skip to content

Instantly share code, notes, and snippets.

@jamtur01
Created December 27, 2012 05:18
Show Gist options
  • Save jamtur01/4385673 to your computer and use it in GitHub Desktop.
Save jamtur01/4385673 to your computer and use it in GitHub Desktop.
Postfix grok filters
grok {
tags => "postfix/smtpd"
pattern => [ "%{POSTFIXSMTPDCONNECTS}",
"%{POSTFIXSMTPDACTIONS}",
"%{POSTFIXSMTPDTIMEOUTS}",
"%{POSTFIXSMTPDLOGIN}",
"." ]
named_captures_only => true
}
grok {
tags => "postfix/smtp"
pattern => [ "%{POSTFIXSMTPRELAY}",
"%{POSTFIXSMTPCONNECT}",
"%{POSTFIXSMTP5XX}",
"%{POSTFIXSMTPREFUSAL}",
"%{POSTFIXSMTPLOSTCONNECTION}",
"%{POSTFIXSMTPTIMEOUT}",
"." ]
named_captures_only => true
}
grok {
tags => "postfix/bounce"
pattern => "%{POSTFIXBOUNCE}"
named_captures_only => true
}
grok {
tags => "postfix/qmgr"
pattern => "%{POSTFIXQMGR}"
named_captures_only => true
}
grok {
tags => "postfix/anvil"
pattern => "%{POSTFIXANVIL}"
named_captures_only => true
}
grok {
tags => "postfix/cleanup"
pattern => "%{POSTFIXCLEANUP}"
named_captures_only => true
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment