Print Page | Close Window

Log Parsing Sample

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5207
Printed Date: 02 June 2025 at 9:00pm


Topic: Log Parsing Sample
Posted By: Desperado
Subject: Log Parsing Sample
Date Posted: 01 June 2005 at 3:22pm
All,
 
For those of you that want to see what Sawmill can do to parse your logs, I provided them with a log file to use as a sample.  If you go to their home page, http://www.sawmill.net - http://www.sawmill.net and go to "Product Info" and under that menu, click on "Samples", You will see a link to SpamFilter ISP. 
 
Regards,


-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com




Replies:
Posted By: Guests
Date Posted: 01 June 2005 at 3:49pm

Awesome Dan. I have a customer who uses it for their IIS logs, but now I'm interested in using it for parsing my customers Spam Filter logs

 



Posted By: Desperado
Date Posted: 01 June 2005 at 3:55pm

After looking at it, I also see they are not using my very latest filter so the "real" version is even more accurate.  I spent MANY hours on the format plug-in for SpamFilterISP.  I am working on improving the SendmailNT parsing now  ... if I ever get some "Free" time. (ha ha)

BTW ... It works quite well with the Kiwi SysLog files ... assuming that the logging devices are set up to give up enough information.  Took me a while but I am getting some very good "emergency" graphing from my PIX which is logging to Kiwi.

One issue to keep in mind ... parding logs can take a heavy toll on the server doing the parsing so I really recomend running it on a machine that is not performing any other CPU intensive service ... at lease that is my MS Windows experience.

Regards,



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com




Print Page | Close Window