email success log

[depot123]

Hello,
Is there a log of successful email account logins?

Brute Force Monitor will show me un-successful logins.
But I'd like to see a log showing date, time, and IP address of successful logins, for the email accounts.
Thanks.

 

[Richard G]

Depends on your OS maybe.
We're using Centos/Alma and then successful logins should also be in the /var/log/maillog file.

 

[depot123]

Thank you Richard, very helpful as usual.
Yes I've got Centos 7 Minimal here. And yes the log is in /var/log/maillog as you say.

I had seen that, but it was only showing "the last 50 lines" so I ignored it.
It's a huge file, or rather, there's lots of info in it.
It is only showing for today. I'll need to check whether I can config it to show a longer time period.

Thanks again.

 

[Richard G]

Thank you. You're welcome.

It is only showing for today. I'll need to check whether I can config it to show a longer time period.

Odd, because a week should be the default and it should be managed by logrotate by default.
Mine look like this:

-rw-------   1 root     root            1.3M 2023-06-04 20:20 maillog
-rw-------   1 root     root             19M 2023-05-14 07:16 maillog-20230514
-rw-------   1 root     root             21M 2023-05-21 03:42 maillog-20230521
-rw-------   1 root     root             19M 2023-05-28 04:57 maillog-20230528
-rw-------   1 root     root             19M 2023-06-04 04:09 maillog-20230604

So as you can see, the maillog is 1 file for 7 days long, then it gets rotated and kept for a while.
My first maillog is from may 7th until may 14th. and last from may 28 until june 4th. The current started june 4th.

Did you change anything in your /etc/logrotate.conf file by any chance?