PostFix Mail Transfer Agent
JSA can collect and categorize syslog mail events from PostFix Mail Transfer Agents (MTA) installed in your network.
To collect syslog events, you must configure PostFix MTA installation to forward syslog events to JSA. JSA does not automatically discover syslog events that are forwarded from PostFix MTA installations as they are multiline events. JSA supports syslog events from PostFix MTA V2.6.6.
To configure PostFix MTA, complete the following tasks:
On your PostFix MTA system, configure
syslog.confto forward mail events to JSA.
On your JSA system, create a log source for PostFix MTA to use the UDP multiline syslog protocol.
On your JSA system, configure IPtables to redirect events to the port defined for UDP multiline syslog events.
On your JSA system, verify that your PostFix MTA events are displayed on the Log Activity tab.
If you have multiple PostFix MTA installations where events go to different JSA systems, you must configure a log source and IPtables for each JSA system that receives PostFix MTA multiline UDP syslog events.