Empty maillog

[Al Gilson]

Howdy,

Currently running cPanel v68.0.28.

Back story:
We have a client with 244 users. 243 of the users are able to use POP3/IMAP without issue. But there's one user who repeatedly has said that they do not receive any email for an entire morning and then all the email shows up after lunch. Apparently they do not have any rules set up in Outlook, and they are clicking send/receive which doesn't make a difference.

What we see:
On the entire server of 600+ users, no issues except for this one repeated case.

What I'd like:
I'd like to read through maillog and/or a user-level dovecot log and show the client that the user is not connecting to the server as much as they believe they are.

My problem:
maillog is empty. And the archived maillog before it, empty. And the maillog before that? Also empty. At some point the system upgraded from syslog to rsyslog and I believe the logging stopped.

My question:
How do I enable logging for individual POP3/IMAP logins?

Thanks,

- Al

 

[cPanelMichael]

Hello,

Could you run the following command and let us know the output?

grep mail /etc/rsyslog.conf

Thank you.

 

[Al Gilson]

Hello,

Could you run the following command and let us know the output?

grep mail /etc/rsyslog.conf

For sure. I added this in, as there was only one line in my rsyslog.conf and I saw elsewhere in the forums that someone mentioned to add this. I also restarted dovecot and rsyslog to see if that would help after I added it. It didn't.

# Log all the mail messages in one place.
mail.* -/var/log/maillog

- Al

 

[cPanelMichael]

Hello,

Could you open a support ticket using the link in my signature so we can take a closer look?

Thank you.