how to know user activity from log

[cedbl]

Hi
i need to know if a user or its client deleted a specific mail

zmmsgtrace gives me "sent" but the message isn't in inbox and in junk

/var/log/postfix give me Ok but in /opt/zimbra/store(<hash>/mbox-id>/msg/<hash> there is not that message

[Dirk]

Deletion activities are not logged but there's room to argue that if it was delivered then the use must have deleted it?

[cedbl]

I think it was a misconfiguration of client but i'm not so sure

i was called for 3 messages that was not in inbox client
i send a test message and it was not arrived in inbox (client and zimbra)

but as i wrote logs give me ok!

then
i found stats in admin gui stopped, so i restart zimbra
and a second test message was delivered in inbox
but i have no news for the other 4 messages

it seems like deletion was made in both
but i did test with my user and for my test message i can exclude

[cedbl]

We found other cases

[ArcaneMagus]

Are you still on 4.5.10? I had a similar issue with only one person back on the 4.5.x branch where as far as I could see from the logs the user had received the messages but it wasn't in their mail box. It was only for that user and the problem never appeared in the 5.0.x or 6.0.x branch.

[cedbl]

Originally Posted by ArcaneMagus

Are you still on 4.5.10?

yes

Originally Posted by ArcaneMagus

I had a similar issue with only one person back on the 4.5.x branch where as far as I could see from the logs the user had received the messages but it wasn't in their mail box.

No i found more issue for two persons
[/QUOTE]

My certificate has expired some days ago
but i don't think could be this

Can somebody explain wath logs and what "expression" i have to look for?
I would be sure to exam all my logs

[phoenix]

You'll find details in the log files, if an email is delivered to the users mailbox then it's likely they have a filter that's deleting it or the users is deleting it them selves.