Dovecot Stats for Logwatch

[Aki Tuomi]

> On 24/05/2021 10:20 Plutocrat <plutocrat at gmail.com> wrote:
> 
>  
> Hi all,
> 
> I run logwatch on a few servers and the script on there which parses the dovecot logs provides waaaaaay too much detail, and contains a bunch of stuff I'm not interested in. There's not much point in having a log summary if its 100Kb long! The one for exim is also terrible, but I've replaced that with eximstats, and a bit of bash scripting and have something I can work with. I might at some point look at replacing that too.
> 
> Now to my question. I haven't found anything in the dovecot family which compares to eximstats. I was wondering if there possibly is a report tool, or a way of extracting stats from doveadm just for key metrics such as 'number of POP logins in the last 24 hours', number of failed passwords, etc. Things that might be interesting on a logwatch report. Or maybe someone has written a script already that can  be used in logwatch in perl, python, bash, whatever. Any pointers, suggestions, or ideas for useful summary metrics to pull out of the logfiles are appreciated.
> 
> I suspect I might end up writing one myself anyway, but I'm just keen to see what already exists, get the benefit of anyone else's experiences in this matter before I start.
> 
> P.

with recent 2.3.14

metric auth_failed {
   filter=event=auth_request_finished and (not success=yes)
   group_by = service
}

service stats { 
   inet_listener http {
     port = 9900
   }
}

should produce

auth_failed_pop3 etc. which you can collect with prometheus, or you can use `doveadm stats dump`

Aki