Blank reports ...

[Wytze van der Raay]

James Herschel wrote:
> Hello,
> 
> I'm running Qmail 1.03 with Qmail-Scanner 1.16 and SpamAssassin 2.55.  I am
> trying to generate reports using "lr_run lr_log2report -o txt spamassassin <
> /var/log/maillog > /home/blism/parsed"
> 
> As per the link below, I have patched a src.rpm with the necessary changes
> for SpamAssassin 2.55 but I still receive blank reports.
> 
> http://logreport.org/contact/lists/questions/msg00355.php
> 
> Here is an example of my logs ...

> ...
> Oct 10 15:11:20 cygnus spamd[28271]: processing message
> <bm6vjs$7s2$1 at sea.gmane.org> for qmailq:401.
> ...
> Oct 10 15:11:25 cygnus spamd[28271]: clean message (-1.4/5.0) for qmailq:401
> in 5.1 seconds, 3454 bytes.
> ...

> Is this not the proper log file to point lr_report to? Should I be pointing
> it to the qmail-scanner logs?

No, you are using the proper logfile for processing. I have quoted above
the only two lines from your sample log which are relevant to the
current version of the spamassassin2dlf convertor. The current convertor
is rather strict in the format it expects in the logfile; if you take a
look at /usr/libexec/lire/convertors/spamassassin2dlf, you will notice
that in essence only two patterns are matched:

    if ($line=~/^processing message \<(.+?)\> for (.+?):\d+, expecting
(\d+) bytes\. *$/) {

and

    if ($line=~/^(clean message|identified spam) \((-?[\d.]+)\/[\d.]+\)
for .+?:\d+ in +(\d+) seconds, (\d+) bytes./) {

The second pattern will work with your log file after applying the
[\d.]+ fix for the seconds field pattern match, the first pattern does
not work with your logfile since you don't have the "expecting xxx
bytes" part. You are encouraged to generalize the pattern or add similar
patterns so that it matches your case(s) as well, and please contribute
them to the LogReport project!

Regards,
Wytze van der Raay

-- 
To UNSUBSCRIBE, email to questions-request at logreport.org with a subject of 
"unsubscribe". Trouble? Send an email with subject "help" to 
questions-request at logreport.org