Skip to content

Commit 78af96e

Browse files
authored
Fix local_to event (#46)
Some events not only have `to` but also `orig_to`.
1 parent ed4d7ae commit 78af96e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

filter-50-local.conf

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
filter {
22
if [postfix][component] == "local" {
33
grok {
4-
match => ["message","to=<%{DATA:[destination][user][email]}>, relay=%{HOSTNAME:[postfix][relay]}, delay=%{NUMBER:[postfix][delay]:float}, delays=%{DATA:[postfix][delays]}, dsn=%{DATA:[postfix][dsn]}, status=%{WORD:[postfix][status]} \(%{GREEDYDATA:[postfix][detail]}\)"]
4+
match => ["message","to=<%{DATA:[destination][user][email]}>(, orig_to=<%{DATA:[postfix][orig_to]}>)?, relay=%{HOSTNAME:[postfix][relay]}, delay=%{NUMBER:[postfix][delay]:float}, delays=%{DATA:[postfix][delays]}, dsn=%{DATA:[postfix][dsn]}, status=%{WORD:[postfix][status]} \(%{GREEDYDATA:[postfix][detail]}\)"]
55
id => "postfix_local"
66
tag_on_failure => ["_grokparsefailure","postfix_local_failed"]
77
add_field => {

0 commit comments

Comments
 (0)