Kwikstix,

Very glad to hear it works now.  Did you purchase SawMill or are you going to purchase it?  If so, would you mind terribly letting Greg over at SawMill know you are using it for the LogSat logs and saw my postings?  His address is  ferrar at flowerfire dot com. I do not know if it will get me anything but I do bug him a lot and he is VERY helpfull over there and letting him know that his time spent over the last year has actually led to a sale would be nice.

I hope SpamFilterISP works as well for you as it has for me.  I do not think I have EVER gotten the kind of support that Roberto gives us from any other product.  THANKS Roberto ... and don't forget your parachute!

Desperado - It WORKED!  Thanks a million!

You asked what version I'm using.  I started evaluating SF last week, so I'm still only running 2.7.1.511 in eval mode.  It hasn't taken me long to know that this is definitely the spam filter I'm gonna buy, though, especially now that I'm sorting out the statistics piece of it.

You're a great resource - thanks a lot!

Mike

Kwikstix,

Here is the problem ... even if you overwrite the log plug-in, you have to delete and re-create the "Profile" or the Sawmill profile will continue to use the existing (old) format.  This means you have to re-import all your logs.  This was a pain in the arse for me when I update my log format but I deal with it.

Please try that and let me know if you still get "wimpy" data.  You should get up to 7 actions and hmmmm, around 20-35 reasons depending on your SpamFilter options and setup.

Please get back to me as I want to make sure this is working for ALL installs.  BTW, which SpamFilter version are you running?  Older versions may not parse as well.

Wow - quick responses - you ROCK man!

Thanks for the updated cfg file.  However, I'm still only seeing Accepted and Rejected under my Actions report in Sawmill.  Is something not being logged correctly in SF?

Mike

Get the latest at:

http://spamman.mags.net/sawmill/logsat_spam_filter_isp.cfg

Desperado,

The date on my config file is May 20, 2005

Mike

KwikStix,

Please look at the log format plugin and tell me what version that is.  It is in the LogAnalysisInfo/log_formats/logsat_spam_filter_isp.cfg file and should read:

# Updated to match new log entries - Dec-30-2005 Dan Seligmann, Mags Net, LLC
log.format.format_label = "LogSat SpamFilterISP Log Format B500.8"

Desperado,

I've been using sawmill for my website stats for some time.  I'm currently running the latest production version (7.2), but my SF stats look different than yours.  Primarily, I only get two Actions in my report: Accepted and Rejected.  Do I have something misconfigured, or does Sawmill not include the same config you're using?

Mike

Then the last  concern is the size of the autowhitelistdelivery.txt file and having only one.

We use it in a non-conventional way by parsing our outgoing email server log for outgoing emails and adding FROM|TO pairs into the autowhitelistdelivery.txt file thereby whitelisting the addresses of the customers our users send emails to. Its doing good for now but the question is what number will break the camels back as far as size.