Parsing logs of the mdaemon mail server using zabbix.

[k.nazarov]

Good day!

Tell me if zabbix has the ability to parse logs. Here is what I mean.
Example:
- the number of spam messages received by the user /
- the number of interrupted sessions by user
- number of pop, imap, smtp sessions
- the amount of data received / sent by the user, etc.


Example log from which to take values:

Tue 2020-06-30 00:20:34.493: Session 763905; child 0001
Tue 2020-06-30 00:20:34.493: Accepting POP3 connection from 255.255.255.0:61428 to 255.255.255.0:110
Tue 2020-06-30 00:20:34.493: --> +OK mail.zavod.ru POP3 MDaemon 19.5.5 ready
Tue 2020-06-30 00:20:34.508: <-- CAPA
Tue 2020-06-30 00:20:34.508: --> +OK Capability list follows
Tue 2020-06-30 00:20:34.508: --> TOP
Tue 2020-06-30 00:20:34.508: --> USER
Tue 2020-06-30 00:20:34.508: --> UIDL
Tue 2020-06-30 00:20:34.508: --> STLS
Tue 2020-06-30 00:20:34.508: --> .
Tue 2020-06-30 00:20:34.560: <-- USER tty.kirill
Tue 2020-06-30 00:20:34.561: --> +OK tty.kirill... User ok
Tue 2020-06-30 00:20:34.562: <-- PASS ******
Tue 2020-06-30 00:20:34.564: Authenticated as [email protected]
Tue 2020-06-30 00:20:34.567: --> +OK [email protected]'s mailbox has 93 total messages (22346357 octets)
Tue 2020-06-30 00:20:34.577: <-- STAT
Tue 2020-06-30 00:20:34.577: --> +OK 93 22346357
Tue 2020-06-30 00:20:34.578: <-- UIDL
Tue 2020-06-30 00:20:34.579: --> +OK
Tue 2020-06-30 00:20:34.579: Sending UIDL response (not logged)
Tue 2020-06-30 00:20:34.585: <-- LIST
Tue 2020-06-30 00:20:34.585: --> +OK 93 22346357
Tue 2020-06-30 00:20:34.585: Sending LIST response (not logged)
Tue 2020-06-30 00:20:34.642: <-- QUIT
Tue 2020-06-30 00:20:34.642: --> +OK [email protected] zavod.ru POP3 Server signing off (93 messages left)
Tue 2020-06-30 00:20:34.642: POP3 session complete (Bytes in/out: 60/5544)
Tue 2020-06-30 00:20:34.642: ----------

INBOUND message: md50008096581.msg
Tue 2020-06-30 09:34:50.505: * From: Π衰˨

[Hamardaban]

Mdaemon publishes windows performance counters - you can take information from them.
Zabbix is not a log parsing system. Read about the possibilities for processing logs here:
https://www.zabbix.com/documentation...ypes/log_items