[Dovecot] how to handle logging

[Ben]

On 14/10/2013 12:41, Andreas Schulze wrote:
> Hello,
>
> I plan a migration to dovecot and have concerns about the amount of logged data.
> On a testsystem dovecot produced 1TB syslog per day with a comparable amount of pop3 sessions.
>
> The current server log to STDOUT which is connected to multilog
> (circular buffer, http://cr.yp.to/daemontools/multilog.html)
> That way I can have a look at the last activities to any time.
>
> I like to have that in dovecot too. But since dovecot uses syslog
> it's not possible to adopt 1:1
>
> Any ideas?
> Thanks
>
>

What's wrong with good old sysslog, or why don't you use Splunk or some 
other proper grown-up logging tool ?   Relying on STDOUT sounds like a 
recipe for disaster.