log retention period

[dipeshmehta]

I have been reported by one of our users about non receipt of some mails from one domain. The missing mails are of more than two months back. I checked the said domain (and sender server) for black list etc, but the reputation seems not have any problem. I want to check logs at my server but couldn't find logs for such long period. So I would like to know about default log retention period as well as how can I increase it.

Dipesh

[Krishopper]

It is set in /etc/logrotate.d/zimbra

That file will be changed/overwritten on every upgrade, so be sure to keep your changes saved somewhere that you can restore it accordingly.

Another option is to use a package to index the logs. We went with Splunk and it works quite well.

[dipeshmehta]

Originally Posted by Krishopper

It is set in /etc/logrotate.d/zimbra

Thanks for your reply. Well, I had been checking /var/log/mail.log, can you please tell me where can I set options for the same?

Originally Posted by Krishopper

Another option is to use a package to index the logs. We went with Splunk and it works quite well.

Splunk sounds well, I would check in detail for possibilities about deploying in our environment.

Dipesh

[phoenix]

Originally Posted by dipeshmehta

Thanks for your reply. Well, I had been checking /var/log/mail.log, can you please tell me where can I set options for the same?

That a log file and not where the options are set, go to the file mentioned above and set the option, it's obvious where the setting are.