have I missed somthing in my setup - GWIA logging

I'm not sure my GWIA is logging is setup correctly

Apart from setting Verbose during installation - I have not tweaked it at all.
This is a small 10 user system so I didn't think I'd need to!

In reality only about 6 active users and 3 which probably get 20 emails a week...

Each of 6 main users have 3 additional POP accounts with default 15 mins settings

Looking at logs for some delivery problems - I see LOTS of POP related activity
Normal SMTP send receive activity missing in some case

Looks like GWIA logging only able to log a in/out activity at a time ?
e.g. I'm looking for email sent at 12:02 - but there is simply nothing in the logs at that time other than a POP connection

This would be well useless if system had say a hundred users - actually its useless for 6 users

What do I need to configure / change ?

I don't look at logs like this often but it must be setting if SMTP In/Out is not logged just because of pop activity
with say 50 users there may be dozens of emails being sent / received in a minute

Tags:

  • Hi,

    Check via the web console to ensure that your logging is indeed set to verbose. In my experience my GWIA logs absolutely everything in that mode - nothing skipped at all. We need to understand why your logs are incomplete. Oh - have you setup authentication on the Web Console?

    Cheers,
  • Your indignation may be somewhat premature. I would find it to be unexpected for the logs to be missing data. What version of everything are you running? How are you looking at the logs? Midnight is the default restart time for the logging. Is the time correct on the server? So one has to wonder if the message in question was processed before or after midnight.

    If this is a SENT message, surely its sitting in the user's sent items, so what is the status of the message? Does it say transferred?

    The other alternative is that the messages are not being sent via the GWIA.

    So more info is needed.

    I've got 3700 users through one GWIA, and I have never observed an instance where the logs were incomplete.

    -- Bob
  • Yes, I have just checked

    Logging is enabled and set to VERBOSE, 30 days, log size 102400

    I've always assumed the logs would contain every thing!

    occasionally checked in the past but this time I can't see an important email

    and only 1 GWIA - all messages are sent via GWIA
    for pop I have setup a dummy account for Outgoing and using Server IP

    There is 1 incoming logged at 12:02:16 - pop connection which ends at 12:02:19
    at 12:02:43 Incoming email which ends at 12:02:51
    next item recorded is 12:03:20 another POP connection

    Client shows message Transferred at 12:02 - not in the logs !
    I've SEARCHED for the email address in question - there is an entry at 13:01 INCOMING and 14:22

    do I need to adjust Threads / number of messages or something?
  • only 1 GWIA - default setting

    GW 2012

    Checked - Logging is enabled and set to VERBOSE, 30 days, log size 102400

    I've always assumed the logs would contain every thing!
    occasionally checked in the past but this time I can't see an important email
    (for pop I have setup a dummy account for Outgoing and using Server IP)

    There is 1 incoming logged at 12:02:16 - pop connection which ends at 12:02:19
    at 12:02:43 Incoming email which ends at 12:02:51
    next item recorded is 12:03:20 another POP connection

    Client shows message Transferred at 12:02 - not in the logs !
    I've SEARCHED for the email address in question - there is an entry at 13:01 INCOMING and 14:22

    do I need to adjust Threads / number of messages or something?
  • On 26.01.2014 10:36, bhrt60 wrote:
    >
    > only 1 GWIA - default setting
    >
    > GW 2012
    >
    > Checked - Logging is enabled and set to VERBOSE, 30 days, log size
    > 102400
    >
    > I've always assumed the logs would contain every thing!
    > occasionally checked in the past but this time I can't see an important
    > email
    > (for pop I have setup a dummy account for Outgoing and using Server IP)
    >
    > There is 1 incoming logged at 12:02:16 - pop connection which ends at
    > 12:02:19
    > at 12:02:43 Incoming email which ends at 12:02:51
    > next item recorded is 12:03:20 another POP connection
    >
    > Client shows message Transferred at 12:02 - not in the logs !
    > I've SEARCHED for the email address in question - there is an entry at
    > 13:01 INCOMING and 14:22
    >
    > do I need to adjust Threads / number of messages or something?


    I would bat *a lot* of money on the simple fact that your client isn't
    sending the mail through GWIA. That simple. As you're obviously using
    the client as POP client mainly, but not as native Groupwise client,
    your client most likely sends it's mail via SMTP. And whatever you have
    put in the SMTP server field of the POP account in your GW client is
    *not* your GWIA, but some other SMTP server.

    CU,
    --
    Massimo Rosen
    Novell Knowledge Partner
    No emails please!
    http://www.cfc-it.de
  • mrosen;2303045 wrote:
    On 26.01.2014 10:36, bhrt60 wrote:
    >
    > only 1 GWIA - default setting
    >
    > GW 2012
    >
    > Checked - Logging is enabled and set to VERBOSE, 30 days, log size
    > 102400
    >
    > I've always assumed the logs would contain every thing!
    > occasionally checked in the past but this time I can't see an important
    > email
    > (for pop I have setup a dummy account for Outgoing and using Server IP)
    >
    > There is 1 incoming logged at 12:02:16 - pop connection which ends at
    > 12:02:19
    > at 12:02:43 Incoming email which ends at 12:02:51
    > next item recorded is 12:03:20 another POP connection
    >
    > Client shows message Transferred at 12:02 - not in the logs !
    > I've SEARCHED for the email address in question - there is an entry at
    > 13:01 INCOMING and 14:22
    >
    > do I need to adjust Threads / number of messages or something?


    I would bat *a lot* of money on the simple fact that your client isn't
    sending the mail through GWIA. That simple. As you're obviously using
    the client as POP client mainly, but not as native Groupwise client,
    your client most likely sends it's mail via SMTP. And whatever you have
    put in the SMTP server field of the POP account in your GW client is
    *not* your GWIA, but some other SMTP server.

    CU,
    --
    Massimo Rosen
    Novell Knowledge Partner
    No emails please!
    http://www.cfc-it.de


    emmm.. I wouldn't be so quick... Question: what would you call a *a lot* of money ?

    Well you just lost *a lot* of money!

    I appreciate your thinking that my POP settings may be "Other" SMTP server - its NOT.

    POP is necessary because the GroupWise developers haven't provided a decent way of handling multiple domains (yes, I have made a Enhancement request for what its worth!)
    Many companies run MULTIPLE domains - sure you can create a convoluted solution using nicknames etc
    Having multiple accounts proxy is just silly IMHO.

    user needs to handle user@domainA.com, user@domainB.com, user.name@domainC.com. All these messages arrive in the ONE mailbox and user (often but not always) will want to send as domainA, domainB or domainC.

    with a POP account setup for OUTgoing - this is NEAT and by far most simplest solution.

    Going back to the setup of POP
    As I said in my post created a account (called "outmail") and I put in the SERVER / GWIA IP in the server name
    oh did I say I see TONS of entries in GWIA logs with POP login (every 15 mins - there are six users with 3 POP accounts each)

    YES - I'm sure GWIA is being used for ALL mail including POP

    This is a small system - ONLY 1 GWIA
    Xeon QuadCore 3.1Ghz, 16Gb RAM, SAS RAID with 15k RPM drives
    OES11 SP1 with GW2012 SP1
  • In article <bhrt60.68ijg0@no-mx.forums.novell.com>, Bhrt60 wrote:
    > I'm not sure my GWIA is logging is setup correctly
    >

    how about showing us the first part of first log of the morning between
    the Begin/End Configuration Information. Just hash## out your identity
    info and we should be able to help from that.

    Have you searched your logs for "SMTP session"? The times aren't always
    as you might think they are, especially if your systems aren't totally
    in time sync.

    Do you have plans on updating to GW2012 sp2 soon? It has been out quite
    a while.


    Andy of
    KonecnyConsulting.ca in Toronto
    Knowledge Partner
    http://forums.novell.com/member.php/75037-konecnya
    If you find a post helpful and are logged in the Web interface, please
    show your appreciation by clicking on the star below. Thanks!

  • emm - I posted a reply but its not here - posting reply again

    Sorry - Its GW2012 SP2 already. This was installed in october last year - I think its the 1st sp2

    I searched for email address and part of email address concerned
    Webconsole allows you filter by email or part of the text - I tried that

    OK I appreciate timing my not be exact. (Would Transferred time shown in the client be the same ?)

    ****** 01-23-14 00:00:00 ******
    00:00:00 F479 *** Switched from old log file: a new day has started ***
    00:00:00 F479 Begin Configuration Information
    00:00:00 F479 GroupWise Agent Build Version: 12.0.2-108211
    00:00:00 F479 GroupWise Agent Build Date: 03-25-13
    00:00:00 F479 Platform= UNIX
    00:00:00 F479 Domain and Agent= gwdom.GWIA
    00:00:00 F479 Foreign Name= mail.xxx.co.uk
    00:00:00 F479 Description= <none specified>
    00:00:00 F479 Alias Type= <none specified>
    00:00:00 F479 Root Directory= /media/nss/DATA1/gwsys/gwdom/wpgate/gwia
    00:00:00 F479 Work Directory= /media/nss/DATA1/gwsys/gwdom/wpgate/gwia/000.prc/gwwork
    00:00:00 F479 Log File= /var/log/novell/groupwise/gwia.gwdom/0122gwia.001
    00:00:00 F479 Directory ID= gwi998f
    00:00:00 F479 Directory Synchronization= NO
    00:00:00 F479 Directory Exchange= NO
    00:00:00 F479 Accounting= YES
    00:00:00 F479 Convert GroupWise Status to Messages= NO
    00:00:00 F479 Outbound Status Level= UNDELIVERED
    00:00:00 F479 Log Level= Verbose
    00:00:00 F479 Log Max Age= 30 days
    00:00:00 F479 Log Max Space= 102400 kb
    00:00:00 F479 Enable Recovery= YES
    00:00:00 F479 Retry Count= 10
    00:00:00 F479 Retry Interval= 60 seconds
    00:00:00 F479 Failed Recovery Wait= 3600 seconds
    00:00:00 F479 Network Reattach Command= <none specified>
    00:00:00 F479 Correlation DB Enabled= YES
    00:00:00 F479 Correlation DB Age= 14 days
    00:00:00 F479 Correlation DB Directory= /media/nss/DATA1/gwsys/gwdom/wpgate/gwia
    00:00:00 F479 Send/Receive Cycle= 2 minutes
    00:00:00 F479 Minimum Run= 0 minutes
    00:00:00 F479 Idle Sleep Duration= 10 seconds
    00:00:00 F479 Snap Shot Interval= 10 minutes
    00:00:00 F479 Time Zone= GMT
    00:00:00 F479 GMT Offset= 0 hours, 0 minutes
    00:00:00 F479 Hemisphere= NORTH
    00:00:00 F479 Daylight Saving Change= 1 hours, 0 minutes
    00:00:00 F479 Daylight Saving Begin= 3/30 (month/day)
    00:00:00 F479 Daylight Saving End= 10/26 (month/day)
    00:00:00 F479 SNMP On
    00:00:00 F479 Startup Switches= --home /media/nss/DATA1/gwsys/gwdom/w
    00:00:00 F479 pgate/gwia
    00:00:00 F479 End Configuration Information
    00:00:00 F479 ************ Performing Daily Maintenance ***********
    00:00:00 F479 ************* Daily Maintenance Complete ************
    00:00:00 F479 ****** 01-23-14 00:00:00 ******
    00:00:00 F46B *************** Switching to new log file ***************
    00:00:00 F46B Begin Configuration Information
    00:00:00 F46B GroupWise Agent Build Version: 12.0.2-108211
    00:00:00 F46B GroupWise Agent Build Date: 03-25-13
    00:00:00 F46B Platform= UNIX
    00:00:00 F46B Domain and Agent= gwdom.GWIA
    00:00:00 F46B Foreign Name= mail.xxx.co.uk
    00:00:00 F46B Description= <none specified>
    00:00:00 F46B Alias Type= <none specified>
    00:00:00 F46B Root Directory= /media/nss/DATA1/gwsys/gwdom/wpgate/gwia
    00:00:00 F46B Work Directory= /media/nss/DATA1/gwsys/gwdom/wpgate/gwia/000.prc/gwwork
    00:00:00 F46B Log File= /var/log/novell/groupwise/gwia.gwdom/0122gwia.001
    00:00:00 F46B Directory ID= gwi998f
    00:00:00 F46B Directory Synchronization= NO
    00:00:00 F46B Directory Exchange= NO
    00:00:00 F46B Accounting= YES
    00:00:00 F46B Convert GroupWise Status to Messages= NO
    00:00:00 F46B Outbound Status Level= UNDELIVERED
    00:00:00 F46B Log Level= Verbose
    00:00:00 F46B Log Max Age= 30 days
    00:00:00 F46B Log Max Space= 102400 kb
    00:00:00 F46B Enable Recovery= YES
    00:00:00 F46B Retry Count= 10
    00:00:00 F46B Retry Interval= 60 seconds
    00:00:00 F46B Failed Recovery Wait= 3600 seconds
    00:00:00 F46B Network Reattach Command= <none specified>
    00:00:00 F46B Correlation DB Enabled= YES
    00:00:00 F46B Correlation DB Age= 14 days
    00:00:00 F46B Correlation DB Directory= /media/nss/DATA1/gwsys/gwdom/wpgate/gwia
    00:00:00 F46B Send/Receive Cycle= 2 minutes
    00:00:00 F46B Minimum Run= 0 minutes
    00:00:00 F46B Idle Sleep Duration= 10 seconds
    00:00:00 F46B Snap Shot Interval= 10 minutes
    00:00:00 F46B Time Zone= GMT
    00:00:00 F46B GMT Offset= 0 hours, 0 minutes
    00:00:00 F46B Hemisphere= NORTH
    00:00:00 F46B Daylight Saving Change= 1 hours, 0 minutes
    00:00:00 F46B Daylight Saving Begin= 3/30 (month/day)
    00:00:00 F46B Daylight Saving End= 10/26 (month/day)
    00:00:00 F46B SNMP On
    00:00:00 F46B Startup Switches= --home /media/nss/DATA1/gwsys/gwdom/w
    00:00:00 F46B pgate/gwia
    00:00:00 F46B End Configuration Information
  • Hi.

    On 26.01.2014 22:26, bharat1 wrote:
    >
    > emmm.. I wouldn't be so quick... Question: what would you call a *a lot*
    > of money ?
    >
    > WELL YOU JUST LOST *A LOT* OF MONEY!
    >
    > I *appreciate *your thinking that my POP settings may be "Other" SMTP
    > server - its NOT.


    Well, quite frankly: If it would use the GWIA, it would be in the logs.

    I support GWIA since the GWIA even exists as part of Groupwise. I have
    *never* seen nor even heard that the GWIA would miss stuff like this in
    it's log.

    Hence there's only two possible explanations:

    1. You are the very first with such an issue.

    2. Your GWIA just doesn't log it because it actually never happens at
    your GWIA. And believe me, you were *NOT* the first to whom that would
    happen.


    CU,
    --
    Massimo Rosen
    Novell Knowledge Partner
    No emails please!
    http://www.cfc-it.de
  • Let me first say I'm no expert...
    by your standard I came late in the with GroupWise as my 1st GW system was 5.1

    As far as entry I'm looking for - its NOT in the GWIA log file but the client says it was transferred 12:02

    This particular email was DEFAULT domain which I guess is GWIA SMTP unless GW has developed a technique to send via a pop account when selecting New Mail and tying in a email, subject and message.
    But again I'm no expert so may be its possible. NO hang on - its not possible.

    (1) Anything is possible. (on Netware - had many servers running for 12 months or more without GWIA restart being necessary)
    (2) NOT in this case. Only 1 GWIA. POP also uses GWIA

    I hope its NOT (1) - if people believe GWIA is infallible it will never be fixed :(