On Mon, May 06, 2013 at 01:16:48PM -0400 you wrote:
> You have two separate binaries installed. The one being used to accept
> incoming connections logs to /var/log/exim4_incoming/%slog and the one
> being used for deliveries logs to /var/log/exim4/%slog.
No. I don't have two exim daemons. Or two separate binaries (why
should I?).
> If two separate binaries is intentional, then you might want to use
> syslog instead and stream the logs to one place.
The incoming queue logs to a separate log file. It's there where
incoming connection requests are sorted out. Therefore the log file
grows fast and carries a lot of entries like
2012-08-15 06:25:07 [8919] no IP address found for host natas.kfa.cx (during SMTP connection from cpe-71-66-109-74.neo.res.rr.com [71.66.109.74]:54206 I=[mail server IP]:25)
2012-08-15 06:25:07 [8919] list matching forced to fail: failed to find IP address for natas.kfa.cx
> If everything, except the split logs, about the current setup is
> intentional, and you don't want to use syslog, then all I can do is
> suggest that you script 20 lines of Perl to merge your two sets of logs
> into /var/log/exim4_combined/...
I think that modifying the config to use one log file would be easier. ;-)