sendmail syslog files ?

[Faruk Celik]

Hi,

I'm trying to analyze our Sendmail SMTP logs.
I'm using Sendmail on Solaris 2.7 and 
lire-full-20011017.tar.gz.

And my Sendmail logs are in these files:

/var/log/syslog
/var/log/syslog.0
/var/log/syslog.1
/var/log/syslog.2
..
..
..

And one example line:
Nov  4 03:11:10 mymachine sendmail[5724]: MAA14869:
to=somebody at something.com, ctladdr=myusernamel
(1013/1), delay=3+14:21:3
3, xdelay=00:07:57, mailer=esmtp, relay=m.dnsix.com.
[216.34.13.242], stat=Deferred: 450
<myusername at mymachine.mydomain.com>: Sender address
rejected: Domain not found


I tried that command:

cat /var/log/syslog| ./lr_run ./lr_log2report
/tmp/error email sendmail > /tmp/report.txt


and LIRE created an empty /tmp/report.txt and created
a file in /tmp/error/ saying 
------------------------------
"lines of information from the 37458 lines in the log.
This may be because you sent a log file that doesn't
strictly contains
sendmail logs. This is probable if you sent a syslog
log file without
filtering it to keep only the logs relevant to the
sendmail service.
It could also be because you sent a log file in the
wrong format or
that isn't a sendmail log file.
A report was generated for the 0 lines that could be
extracted
from your log file."
------------------------------

I tried also: (check out "grep sendmail")

cat /var/log/syslog|grep sendmail | ./lr_run
./lr_log2report /tmp/error email sendmail >
/tmp/report.txt

It gave the same result (except number of lines in
/tmp/error file).

What should I send to lr_log2report from my syslog
files to get sendmail reports?

Thanks,
Faruk

__________________________________________________
Do You Yahoo!?
Find a job, post your resume.
http://careers.yahoo.com

-- 
To UNSUBSCRIBE, email to questions-request at logreport.org with a subject of 
"unsubscribe". Trouble? Send an email with subject "help" to 
questions-request at logreport.org