Logs

Spam log

The spam log area lists all the incoming spam and ham logged to the database by Warden.

Column Description
Created The date and time that the entry was created.
Sender The From: address. You can hover over this column to see the sender_envelope.
Recipient The final destination from the To: address. You can hover over this column to see the recipient_envelope.
Client IP The last relay client IP address.
Client rDNS The last relay client reverse DNS.
Subject The subject line of the message.
Learn The autolearn status of the message. Possible statuses are ham, spam, no, disabled, failed, and unavilable) More info
Score The spam score generated by spamassassin for the message.
Required The spam score required to flag the message as spam.
Spam Was the message detected as spam? (yes or no)
Script Was the X-PHP-Originating-Script header set? (yes or no)
Direction Was this an incoming or outgoing email? (in our out).
Flag The country flag of the last relay client IP address.
Sender Envelope The EnvelopeFrom: header if set otherwise the original From: address
Recipient Envelope The original To: address
Vhost The X-PPP-Vhost: header if set.
Originating Script The X-PHP-Originating-Script: header if set.
Mailer The X-Mailer: or X-User-Agent: header if set.
Message-ID The Message-ID: header.

Data source: database

Virus Log

The virus log area lists the viruses that were blocked from incoming email and logged to the database by Warden.

Column Description
Created The date and time that the entry was created.
Sender The message sender.
Recipient The message recipient.
Subject The subject line of the message.
Virus The name of the virus that was detected.
Direction Was this an incoming or outgoing email? (in our out).

Data source: database

Mail Log

The mail raw log area lists the raw postfix logs.

Column Description
Created The date and time that the entry was created.
Service The name of the service that generated the entry.
mesage The log message.

Data source: /var/log/maillog

Mail Reject Log

The mail rejection log area lists emails that were rejected by postfix.

Column Description
Created The date and time that the entry was created.
Queue ID The postfix queue ID of the message.
Sender The message sender.
Recipient The message recipient.
Message The message returned by postfix.
Proto The protocol that was used to connect.
Helo The SMTP "HELO" command that the connecting server issued.

Data source: /var/log/maillog

POP3/IMAP Log

The POP3/IMAP log area list all IMAP and POP3 connections from clients trying to check their incoming email.

Column Description
Created The date and time that the entry was created.
Message The message returned from postfix.
Protocol The protocol that was used to connect (IMAP or POP3)
User The username the client was using to authenticated with.
Client IP The IP address of the connecting email client.
Location The geolocation of the client IP address.
Flag The country flag of the client IP address.

Data source: /var/log/maillog

SMTP Auth Log

The SMTP Auth log area list all SMTP connections from clients sending outgoing email.

Column Description
Created The date and time that the entry was created.
Message The message or queue ID returned from postfix.
Method The SMTP authentication method.
Client IP The IP address of the connecting email client.
Client rDNS The reverse DNS of the client IP.
Location The geolocation of the client IP address.
Flag The country flag of the client IP address.

Data source: /var/log/maillog

AV Log

The AV log area lists the information from the ClamAV daemon log.

Column Description
ID The search result of the entry.
Created The date and time that the entry was created.
Message The log message.

Data source: /var/log/clamd.scan

AV Milter Log

The AV Milter log area lists the information from the ClamAV mail filter log.

Column Description
ID The search result of the entry.
Created The date and time that the entry was created.
Message The log message.

Data source: /var/log/clamav-milter.log

AV Signature Log

The AV Signature Log area lists the information from the Freshclam signature update log.

Column Description
ID The search result of the entry.
Created The date and time that the entry was created.
Message The log message.

Data source: /var/log/freshclam.log

Action Log

The action logs area records all actions that are performed through the web interface.

Column Description
ID The database ID of the entry.
Created The date and time that the entry was created.
Action The action that the user performed through the web interface.
Login The username that the user was logged in as.
Role The group that the use was a part of.
IP Address The IP address of the user.

Data source: database

Application Log

The application logs area records all error and debug information of the web interface.

Column Description
ID The database ID of the entry.
Created The date and time that the entry was created.
Message The message (usually an exception).
Level The log level of the entry (0-8).

Data source: database