[prev in list] [next in list] [prev in thread] [next in thread] 

List:       amavis-user
Subject:    Re: Two primary internal av scanner - get stats
From:       Damian <amavis () arcsin ! de>
Date:       2020-02-19 20:51:37
Message-ID: bcc46609-e34c-827d-dd78-75cb53741137 () arcsin ! de
[Download RAW message or body]

> I get a problem with $log_level = 2 because verbosity greatly increases
> the lines in the logs, from 5k/day to 230k/day... and cause unwanted load
> 
> I wish only get "detected by 1 scanners" information and not others things

You could adapt $log_templ. For example, if you currently use the
standard $log_short_templ or $log_verbose_templ as $log_templ, the
following snippet

> $log_templ =~ s'INFECTED \(%V\)'INFECTED ([:W|])'g;                                 \
> 

will make amavis log something like this:

> amavis[1835]: (01835-01) Blocked INFECTED \
> (ClamAV-clamdscan:[Eicar-Signature,Unix.Trojan.Mirai-6976991-0]; \
> ClamAV-clamd:[Eicar-Signature,Unix.Trojan.Mirai-6976991-0]) \
> {RejectedInternal,Quarantined} ...


[prev in list] [next in list] [prev in thread] [next in thread]