Configuring Postfix to send events

By default, audit events of the Postfix system are output to /var/log/maillog or /var/log/mail.

To send events to KUMA:

1. Create a backup copy of the /etc/rsyslog.conf file.
2. Open the /etc/rsyslog.conf file for editing.
3. Add the following line to the end of the /etc/rsyslog.conf file:

   mail.* @@<IP address of the KUMA collector>:<port of the KUMA collector>

4. Save the /etc/rsyslog.conf file.
5. Restart the rsyslog service:

   sudo systemctl restart rsyslog

Page top