Results 1 to 6 of 6

Thread: Was /opt/zimbra/log/zimbra.log disabled?

  1. #1
    Join Date
    May 2007
    Location
    Brazil
    Posts
    19
    Rep Power
    8

    Default Was /opt/zimbra/log/zimbra.log disabled?

    After I had my zimbra server updated (no it's Release 4.5.6_GA_1044.SuSEES9_20070706142155 SuSEES9 FOSS edition) I didn't find /opt/zimbra/log/zimbra.log where deleted e-mails and pop3 deletions were logged.

    Now, some emails have disappeared and I cannot find the reason out.

    All the services are runnning:
    antispam Running
    antivirus Running
    ldap Running
    logger Running
    mailbox Running
    mta Running
    snmp Running
    spell Running

    I cannot belive this log has been removed. It's quite useful. Maybe it has changed it's name or my log hasn't been enabled. Any tip?

    Thanks in advance

  2. #2
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Nope, it just got renamed (to avoid confusion with /var/log/zimbra.log)

    You want /opt/zimbra/log/mailbox.log (which was /opt/zimbra/log/zimbra.log prior to 4.5)

    Bug 12445 - rename /opt/zimbra/log/zimbra.log

    The current log list: /docs/ne/latest/administration_guide/9_Monitoring.12.1.html#1075561
    Last edited by mmorse; 08-27-2007 at 09:19 AM. Reason: forgot /log/

  3. #3
    Join Date
    May 2007
    Location
    Brazil
    Posts
    19
    Rep Power
    8

    Default



    Theres no such log anymore. /opt/zimbra/log/zimbra.log was replaced by /opt/zimbra/log/mailbox.log. Its content is not the same though.


    I think the prior log was the only one to register the information I've been looking for.

    pop deletion.
    (cat /opt/zimbra.old/log/zimbra.log* | grep -i delet | grep -i pop)
    2007-08-09 11:32:47,046 INFO [Pop3Server-535373] [ip=xxx.xxx.xxx.xxx;name=user@domain.com;] FileBlobStore - deleting blob 52663 in mailbox 89

    user deletion on purpose
    (cat /opt/zimbra.old/log/zimbra.log* | grep -i delet | grep -iv pop)
    2007-08-09 17:52:10,752 INFO [LmtpServer-15160] [] FileBlobStore - deleting blob file (path=/opt/zimbra/store/incoming/1186667417303-509.msg, vol=1)


    Thanks

  4. #4
    Join Date
    May 2007
    Location
    Brazil
    Posts
    19
    Rep Power
    8

    Default

    The problem was pop3 access from another computer without leaving e-mail copies for more than 5 days. Sadly, I didnt find any register of message deletion.

    Is there any way to enable this kind of log?
    How can I change the log format?

    Regards,
    Tilinho

  5. #5
    Join Date
    Oct 2005
    Location
    Thatcher, AZ
    Posts
    5,606
    Rep Power
    21

    Default

    Try /opt/zimbra/log/audit.log

    May I mark this thread as solved?

  6. #6
    Join Date
    May 2007
    Location
    Brazil
    Posts
    19
    Rep Power
    8

    Default

    Quote Originally Posted by jholder View Post
    Try /opt/zimbra/log/audit.log
    It shoes the access but it doesn't show whether the message was removed or not. About the log format, I'll try to find it out asap. Lately I haven't had much time :S

    A few time ago (before updating) an user was downloading someone else emails via pop3. I only descovered that because the emails were desapearing in the IMAP box of the real owner. I went through /opt/zimbra/log/zimbra.log and bingo! There was the answer. If it happends today I have no clues about who the guilty is.

Similar Threads

  1. Replies: 8
    Last Post: 09-18-2008, 05:51 PM
  2. I got Ubuntu and Zimbra working
    By pacsteel in forum Installation
    Replies: 73
    Last Post: 06-23-2008, 11:41 AM
  3. Replies: 45
    Last Post: 11-28-2007, 05:39 PM
  4. zimbra server becomes freezes (cpu load >7)
    By fisch09 in forum Administrators
    Replies: 7
    Last Post: 08-09-2007, 06:18 PM
  5. AS/AV disabled - Mail still going to junk
    By arkade in forum Administrators
    Replies: 1
    Last Post: 04-18-2007, 09:33 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •