Bulk Email Monitoring with zabbix

[bmbagheri]

Hi

I have a number of Linux servers
I want to know if it is possible to check the amount of emails sent from the Linux server with zabbix and be informed about the servers if mass emails are sent?

My goal is to counter mass email and spam.

Thanks

[tim.mooney]

Almost anything is possible, if you're willing to put a little work into it.

Zabbix supports log file monitoring, so you can do things like have it search for certain keywords in an email log file and then alert you if the count of those log file entries is greater than some number that you define over a period of time that you define.

Take a look at the items for log, logrt, log.count, and logrt.count. It should be possible to use those plus some triggers to construct the type of monitors you want.

Take note: log file monitoring using any of those items requires the Zabbix agent, and the check type must be set to "Active".