Introduction

The ORF Log Viewer is a tool for browsing, searching, filtering and exporting ORF log files.

Its primary goal is to make viewing and searching ORF system events—such as email rejections and errors—easier for administrators.

Feature Introduction

Find a brief introduction of ORF Log Viewer features below. To learn more about the features, visit the See Also link on the bottom of each feature introduction.

Viewing log files

The Log Viewer processes ORF log files and displays the events in a table. Each event is displayed in a single row of the table. Table columns visibility and order could be set, events can be sorted by any column. Log events can also be viewed in a popup dialog by double-clicking on the event row or by hitting Enter while the row is selected.

Events are grouped by email by default, with the exception of Greylisting events. Right-click a column header and select Expand All or Collapse All to expand or collapse all event groups. Right-click an event, or a selection of events, and select Expand Event Group (+) or Collapse Event Group (-) to expand or collapse the selected event group(s). Event grouping can be enabled or disabled using the FileView menu.

See Also: General Information | Event Log View | Configuration | Loading Log Files

Searching log files

You can search the processed logs by any visible event property, such as event message, sender or recipient email address. Partial search and Perl-compatible regular expressions are supported by the search.

See Also: Searching the Logs

Filtering log files

Logs can grow large on high email load systems. To make it easier to distill information from the log, you can set up complex filters for the events. When a filter is applied, the Event Log View displays only those events which satisfy the filter rules, like "Emails tagged or blocked from 1.2.3.4". Filters can be saved for later use.

See Also: Filtering the Logs

Exporting log files

The Log Viewer supports exporting the selected/filtered/all events to CSV (Comma-Separated Values) format, which can be processed by Microsoft® Excel or other software. This is useful for generating various summaries about the log, e.g., spam statistics specific two between specific dates.

See Also: Exporting the Logs

Viewing and resending quarantined attachments

You can view and resend quarantined attachments using the right-click context menu or the FileTools menu.

See Also: Event Log View

Supported log files

The ORF Log Viewer currently supports processing log files generated ORF Enterprise Edition version 1.1.1 or higher. ORF Standard Edition log files and pre-1.1.1 log files are not supported.

ORF Enterprise Edition 1.5 introduced significant changes in the log format, which makes processing logs easier, e.g., the sender and recipient email addresses are logged as separate columns. Pre-1.5 version logs contain less information, so some columns, such as the sender and recipient email address column may be left blank when viewing these old-style logs.