<?xml version="1.0" encoding="utf-8" ?>
<?xml-stylesheet type="text/xsl" href="RSS_xslt_style.asp" version="1.0" ?>
<rss version="2.0" xmlns:WebWizForums="http://syndication.webwiz.co.uk/rss_namespace/">
 <channel>
  <title>Spam Filter ISP Forums : consider changing log file format</title>
  <link>https://www.logsat.com/spamfilter/forums/</link>
  <description><![CDATA[This is an XML content feed of; Spam Filter ISP Forums : Spam Filter ISP Support : consider changing log file format]]></description>
  <pubDate>Fri, 15 May 2026 01:19:23 +0000</pubDate>
  <lastBuildDate>Thu, 10 Aug 2006 11:12:23 +0000</lastBuildDate>
  <docs>http://blogs.law.harvard.edu/tech/rss</docs>
  <generator>Web Wiz Forums 11.04</generator>
  <ttl>360</ttl>
  <WebWizForums:feedURL>https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=181</WebWizForums:feedURL>
  <image>
   <title><![CDATA[Spam Filter ISP Forums]]></title>
   <url>https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png</url>
   <link>https://www.logsat.com/spamfilter/forums/</link>
  </image>
  <item>
   <title><![CDATA[consider changing log file format : Dan,  This 13GB DB, is it MySQL?? How...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8693&amp;title=consider-changing-log-file-format#8693</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=261">StevenJohns</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 10 August 2006 at 11:12am<br /><br /><P>Dan,</P><P>&nbsp;</P><P>This 13GB DB, is it MySQL??</P><P>How well is the quarantine DB performing??</P><P>Cheers</P>]]>
   </description>
   <pubDate>Thu, 10 Aug 2006 11:12:23 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8693&amp;title=consider-changing-log-file-format#8693</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format : StevenJohns, Our mail logs go...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8692&amp;title=consider-changing-log-file-format#8692</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=22">Desperado</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 10 August 2006 at 11:02am<br /><br /><P>StevenJohns,</P><P>Our mail logs go back to 1999 but we do not care what the content of a message was/is except for our own internal mail and we use an exchange clone for that.&nbsp; Our SpamFilter Quarantine expires between 2 and 14 days depending on the company we are supporting.&nbsp; Our DB is about 13BG for that.</P><P>WebGuys,</P><P>We are not "public" but we are an ISP (privately owned).</P>]]>
   </description>
   <pubDate>Thu, 10 Aug 2006 11:02:19 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8692&amp;title=consider-changing-log-file-format#8692</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format : Dan, I can see where you are...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8691&amp;title=consider-changing-log-file-format#8691</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=261">StevenJohns</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 10 August 2006 at 10:13am<br /><br /><P>Dan,</P><P>I can see where you are comming from. As Webguyz says, there is no one size fits all, give us the option of how WE want to do our logging, rather than how we are TOLD that we have to do it. That's all. </P><P>By the way, as&nbsp; LogSat was clearly worried about the size of the database....exactly how big is your DB?? If you have 250MB of logs each day, then your quarantine DB must be huge. If you keep your logs for over 14 months, is it reasonable to assume that you keep the quarantined email for as log too??</P><P>What would be the point of having a log saying "you emailed fred at 5:30 on 5/5/06, but I have no idea what the email content was"?</P><P>I don't mean to sound picky, just wondered what an ISP of your size does.</P><P>&nbsp;</P><P>Cheers</P><P>&nbsp;</P>]]>
   </description>
   <pubDate>Thu, 10 Aug 2006 10:13:09 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8691&amp;title=consider-changing-log-file-format#8691</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format : Desperado,  Since there is no...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8690&amp;title=consider-changing-log-file-format#8690</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=102">WebGuyz</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 10 August 2006 at 9:56am<br /><br /><P>Desperado,</P><P>&nbsp; Since there is no 'One Size Fits All' then having a choice would be great. You can keep text logging or go with DB, the key is having the choice.</P><P>You must be a public company to have to keep records for that long. Mine are deleted after 3 months. Can't give anyone what I don't have.</P>]]>
   </description>
   <pubDate>Thu, 10 Aug 2006 09:56:24 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8690&amp;title=consider-changing-log-file-format#8690</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format : StevenJohns,  Just a comment...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8688&amp;title=consider-changing-log-file-format#8688</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=22">Desperado</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 10 August 2006 at 8:47am<br /><br /><DIV><FONT face=Arial size=2>StevenJohns,</FONT></DIV><DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV><DIV><FONT face=Arial size=2>Just a comment or 2 on your post.&nbsp; As an ISP we are bound by "rules" about accountability.&nbsp; My comments may be slanted by that and my general experience of using log files for everything we do.</FONT></DIV><DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV><DIV><FONT face=Arial size=2>Your Post: "With reference to the size of the logs, these people could, as I suggested earlier periodically either delete or export entries that are x days/months old. And, if you have customers with 100s MB of text logs every day, can you imagine the hassle they must have parsing these?? How do they efficiently trace a connection in real time to diagnose problems???? VERY hard I would suggest."</FONT></DIV><DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV><DIV><FONT face=Arial size=2>I just had a situation with the FBI where they needed information for 14 months ago.&nbsp; Deleting logs is NEVER an option.&nbsp; Also, I really do not have any issues (hassles) parsing my logs and tracing anything and I have 3 separate machines with their own logging that each message passes through.&nbsp; I guess the "real time" ting is an issue but with 500,000 messages a day, real time is a relative term anyway.</FONT></DIV><DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV><DIV><FONT face=Arial size=2>Your Post: "we currently log everything to our main reporting DB so that each customer can get stats and graphs of exactly how many emails they have received within a certain time frame, and more importantly (for our billing) how much crap we have stopped going to their domain / mailbox. Our customers DEMAND this type of logging/reporting, otherwise how will they know what they are paying for"</FONT></DIV><DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV><DIV><FONT face=Arial size=2>We do all this with both SawMill, which looks at the actual log files and with custom SQL queries against the quarantine DB.</FONT></DIV><DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV><DIV><FONT face=Arial size=2>We also have scripts that run at midnight to archive all logs over 2 days old to a NAS server if we need to get back to them.&nbsp; Our logging is over 250MB a day (uncompressed) and I shudder to think what kind of machine I would need to do this logging in a DB that would not impact performance.</FONT></DIV><DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV><DIV><FONT face=Arial size=2>My 3 cents.</FONT></DIV>]]>
   </description>
   <pubDate>Thu, 10 Aug 2006 08:47:24 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8688&amp;title=consider-changing-log-file-format#8688</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format :  We really need to get all the...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8686&amp;title=consider-changing-log-file-format#8686</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=9">Web123</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 10 August 2006 at 4:26am<br /><br /><P><IMG src="http://www.logsat.com/spamfilter/forums/smileys/smiley32.gif" border="0"></P><P>We really need to get all the stats directly from SF</P><P>&nbsp;</P>]]>
   </description>
   <pubDate>Thu, 10 Aug 2006 04:26:46 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8686&amp;title=consider-changing-log-file-format#8686</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format : As I suggested, this could be...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8685&amp;title=consider-changing-log-file-format#8685</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=261">StevenJohns</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 10 August 2006 at 4:15am<br /><br /><P>As I suggested, this could be an option that you can turn on or off, also logging to text files could also be a turn on/off option so as to not upset people who have written apps based on the text logging.</P><P>If there is a problem with the database, then you could write these critical errors to text files.</P><P>With reference to the size of the logs, these people could, as I suggested earlier periodically either delete or export entries that are x days/months old. And, if you have customers with 100s MB of text logs every day, can you imagine the hassle they must have parsing these?? How do they efficiently trace a connection in real time to diagnose problems???? VERY hard I would suggest.</P><P>As mentioned in other forum posts, logging is an ESSENTIAL part of a professional ISP, not one that apperas to be an afterthought,Just search your forum and see how many people are having problems with parsing the current text logs....why???? just stick the logs into a database (it's not hard, we already have one !) ....I bet 99% of your customers would be happier.</P><P><BR>Implementing this would cater for all current objections and you would have some great logging which we could use for both diagnostics and getting some easy statistics. For instance, we currently log everything to our main reporting DB so that each customer can get stats and graphs of exactly how many emails they have received within a certain time frame, and more importantly (for our billing) how much crap we have stopped going to their domain / mailbox. Our customers DEMAND this type of logging/reporting, othrewise how will they know what they are paying for ?????</P><P>&nbsp;</P><P>&nbsp;</P>]]>
   </description>
   <pubDate>Thu, 10 Aug 2006 04:15:43 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8685&amp;title=consider-changing-log-file-format#8685</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format : Sorry... no plans to change logging...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8683&amp;title=consider-changing-log-file-format#8683</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=8">LogSat</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 09 August 2006 at 10:09pm<br /><br />Sorry... no plans to change logging format anytime soon. There are 3rd party utilities that rely on the current format, and we do not wish to create problems with them. <br><br>Logging to a database would prevent logging if there were any database issues, and for admins who have 100s of MB logs every day, the database would grow too large too soon.]]>
   </description>
   <pubDate>Wed, 09 Aug 2006 22:09:34 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8683&amp;title=consider-changing-log-file-format#8683</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format :  ]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8682&amp;title=consider-changing-log-file-format#8682</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=102">WebGuyz</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 09 August 2006 at 6:41pm<br /><br /><P><BR>&nbsp;&nbsp;&nbsp;&nbsp; <IMG src="https://www.logsat.com/spamfilter/forums/smileys/smiley15.gif" border="0"></P>]]>
   </description>
   <pubDate>Wed, 09 Aug 2006 18:41:40 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8682&amp;title=consider-changing-log-file-format#8682</guid>
  </item> 
  <item>
   <title><![CDATA[consider changing log file format : Oh my god! Do you realize how...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8681&amp;title=consider-changing-log-file-format#8681</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=22">Desperado</a><br /><strong>Subject:</strong> 181<br /><strong>Posted:</strong> 09 August 2006 at 6:27pm<br /><br />Oh my god!&nbsp; Do you realize how many hours I have spent with SawMill getting the logs to parse REAL NICELY and now we want to change.&nbsp; Will someone help me re-write the parsing plugin?]]>
   </description>
   <pubDate>Wed, 09 Aug 2006 18:27:02 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=181&amp;PID=8681&amp;title=consider-changing-log-file-format#8681</guid>
  </item> 
 </channel>
</rss>