graylog-mailcow-content-pack

A content pack for Graylog that creates magic mailcow insights.

Requierments

• Mailcow
• In the configuration menu of your Graylog the Message Filter Chain has to be at prosition 1 or at least above the Pipeline Processor.
• You need to have a maxmind GeoIP Database setup for your Graylog at /usr/local/etc/graylog/GeoLite2-City.mmdb

Installation

To install the content pack upload it to your Graylog at graylog.domain/system/contentpacks .

Content pack includes:

• 5 Streams:
  • Mailcow
  • Mailcow - Postfix
  • Mailcow - Dovecot
  • Mailcow - Rspamd
  • Mailcow - Netfilter
• Dashboard:
  • mailcow
• Pipelines:
  • Mailcow
  • Mailcow - Postfix
  • Mailcow - Dovecot
  • Mailcow - Netfilter
• Grok patterns:
  • Postfix
  • Dovecot
  • Netfilter

Screenshots