postfix-grok-patterns
postfix-grok-patterns copied to clipboard
Logstash configuration and grok patterns for parsing postfix logging
I added several patterns so may be it'll be helpful. POSTFIX_CLEANUP_REPLACE %{POSTFIX_QUEUEID:postfix.queueid}: replace: header Message-(Id|ID): from %{POSTFIX_CLIENT_INFO}; %{POSTFIX_KEYVALUE_DATA:postfix.keyvalue_data}: Message-(Id|ID): POSTFIX_SMTP_SSLAUTHERR %{POSTFIX_QUEUEID:postfix.queueid}: SASL authentication failed; server %{POSTFIX_RELAY_INFO} said: %{GREEDYDATA:postfix.smtp_response} POSTFIX_CLEANUP %{POSTFIX_CLEANUP_MILTER}|%{**POSTFIX_CLEANUP_REPLACE**}|%{POSTFIX_WARNING}|%{POSTFIX_KEYVALUE}...
Field names in Elasticsearch could be standardized as [defined by ECS](https://www.elastic.co/guide/en/ecs/current/ecs-reference.html)
Hello! Thank you so much for maintaining this project! I was wondering if you had kibana dashboards you could export as well? Thank you!