Re: Two primary internal av scanner - get stats
Damian <[email protected]>
| Newsgroups | gmane.mail.virus.amavis.user |
|---|---|
| Message-ID | <[email protected]> |
> I get a problem with $log_level = 2 because verbosity greatly increases
> the lines in the logs, from 5k/day to 230k/day... and cause unwanted load
>
> I wish only get "detected by 1 scanners" information and not others things
You could adapt $log_templ. For example, if you currently use the
standard $log_short_templ or $log_verbose_templ as $log_templ, the
following snippet
> $log_templ =~ s'INFECTED \(%V\)'INFECTED ([:W|])'g;
will make amavis log something like this:
> amavis[1835]: (01835-01) Blocked INFECTED (ClamAV-clamdscan:[Eicar-Signature,Unix.Trojan.Mirai-6976991-0]; ClamAV-clamd:[Eicar-Signature,Unix.Trojan.Mirai-6976991-0]) {RejectedInternal,Quarantined} ...