Amavis collection

A collection for Amavis :

• amavis parser
• base scenario to ban IPs sending infected emails

Acquisition template

Example acquisition for this collection :

File based

1filenames:
2  - /var/log/amavis.log
3  - /var/log/maillog
4labels:
5  type: syslog

Journalctl based

1---
2source: journalctl
3journalctl_filter:
4  - "SYSLOG_IDENTIFIER=amavis"
5labels:
6  type: syslog