Threaded log of activity?

[dunkirk]

I have enough logs on my system to go crazy, but what I really need is a comprehensive, THREADED log of activity. Specifically, I would like to see that user "A" sent a message to user "B", which had a DSN of x.y.z.

The best I've been able to come up with is to parse the postfix logs in /var/log/mail.info(.*), grab the message UID's from account "A", then look up UID's again (in the same file) to get the "B" email addresses that they were sent to.

Am I missing something obvious here? Is there a way to get something like AWstats to give me ALL of the activity (and not just a summary)?

Thanks,
dk

[ewilen]

Not sure if this will help, but I use /var/log/zimbra.log /var/log/maillog and/opt/zimbra/log/mailbox.log to analyze mail activity. Some careful construction of a regular expression to use with grep should turn up all mail from A to B within a given log.