Mail enable smtp activity logs

Hello everyone

I am trying to pars mail enable activity loga there are millions of logs in un even pattern I write some of the pattern and logs pars in well manner ans structured but now the issue is so many logs parsing fail and every time i have to add and update grok pattern if new log pattern is coming and now config file is very huge how i can handle this kind of situation

Please help ...

Why are your log patterns changing so much?

Hello @warkolm

Thank you for your quick reply Actully this is email server response and getting change logs every email sent and it's response status of recipients and email status so I want some standard solution I am glad if you can help me on this..

Thank you !!!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.