Re: [Exim] Tracking authentications

A good thing is to use the provided tools, for example exigrep:

exigrep /var/log/exim_mainlog A=auth_cram

exigrep eats plain log files as well as archived and gzipped ones. The
above puts out every log part refering to a mail bearing "A=auth_cram"
anywhere in the log lines. The cool thing is, exigrep puts out all lines
of the log refering to the message, not only the line with "A=auth_cram"
in it. Saves a lot of time, you don't have to fiddle with grep yourself.

You might also play with existats, a powerful log analyzing tool.

hth,

Robert Kehl