Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I currently manage a qmail installation, set up on Centos using the qmailrocks guide (which seems to have vanished from the Internet now). So - daemontools, multilog, vpopmail, qmail.

I've been asked to set up a Splunk server for analysing the logs from all our servers, and I can't seem to find any way of making Splunk read multilog messages. I've had a dig around the qmail documentation and found splogger, which is able to log messages to syslog (which Splunk CAN read). So, is there an easy way of replacing multilog with splogger for a qmail installation managed by daemontools, or do I need to completely change how I start qmail?

share|improve this question
up vote 0 down vote accepted

Look for the run file in /var/qmail/supervise/qmail-smtpd/log and replace the multilog line with splogger with the appropriate arguments for splogger. Restart qmail-smtpd with the svc -h /serverice/qmail-smtpd command. Make backups of any changed files of course.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.