How to separate Spamassassin log files

Is there any way of getting Spamassassin logging into a separate file instead of putting it into syslog?


YES ! Here it is...

Pick an unused local facility ie local5.

Configure SA log to that facility by using the -s parameter.

         spamd -s local5

Configure your syslogd to dump local5.* into a separate file, and exclude it from your other logs. Here's a quick syslog.conf example:

         *.info;mail.none;authpriv.none;cron.none;local5.none;    /var/log/messages
        local5.*;         /var/log/spamassassin

Spamassassin Log File

SpamAssassin logs generated by the 'spamd' server thru SA analyze SpamAssassin logs and generate reports. Here are list SA tools :

• logreport.org apparently has a syslog analyzer that can grok SpamAssassin logs:

• mailgraph: Generates graphs from syslogs. demo available.

• mailscanner-mrtg -- demo available

• mailwatch -- no demo, but the previous link has screenshots

• monkeynoodle.org spamassassin MRTG scripts: Scans the maillog/syslog and feeds the SA results into a format from which MRTG is used to create graphs. demo available

• munin: Munin is a tool for graphing all sorts of information about one or more servers and displaying it in a web interface. It uses the excellent RRDTool (written by Tobi Oetiker) and is written in Perl. demo available

• qmailmrtg -- example available

• sa-stats.pl (Dallas Engelken's version) : Generates a report in text or HTML from a spamd log file or from syslog. not to be confused with the "sa-stats.pl" in the SpamAssassin distribution; it's entirely different

• sa-exim-stats : Generates rrdtool graphs from sa-exim log files.

• spamdstats: Continuously parses spamd's log file in the background and stores various data in one Berkely DB file to be read by a second script.

• vispan -- demo available

• sa-daily-report: Generates and mails a report of all the email quarantined as spam the previous day, to allow checking for false positives.

• spamness: An extension for Mozilla Thunderbird 2.0 that gives visual feedback on each message's SpamAssassin score. Screenshots available. Contributors especially welcome, please contact the author if you might be interested in helping improve and maintain the addon.

But what if you dont have any SA tools, then where you can find your SpamAssassin logs.

Simple, open /etc/syslog.conf file & check in which file syslogd is putting SpamAssassin logs.
Here is example:

*.info;authpriv.none;cron.none;local5.none;    /var/log/messages
mail.*;            /var/log/mail

Just vi /var/log/mail to read all mail + SpamAssassin logs.