search for: auth_client_userdb_lookup_finished

Hi Jeff, Thanks for your reply! Regarding grouping by remote address, I understand and for now I'll keep a close eye. Maybe it's an option to group by /24 for ipv4 and /64 for IPv6? We currently do that based on the logs but the OpenMetrics endpoint seem a lot easier. A slight hijack of the original question: but I tried to log only IP addresses (+ result) of failed login attempts but

Hi Jeff, Thanks again for your insights. I understand that a lot of features are pending and it's totally fine, we're just very eager to use all these features. Reagarding the logging of failed attempts I did try to configure this in these two metrics: metric auth_client_userdb_lookup_finished { event_name = auth_client_userdb_lookup_finished group_by = service local_ip remote_ip user } metric auth_client_passdb_lookup_finished { event_name = auth_client_passdb_lookup_finished group_by = service local_ip remote_ip user } In both our testing and production environment these are not...

...information. Am I looking in the wrong > direction? The auth_userdb_request_finished and > auth_passdb_request_finished stats work as intended but they do not > contain any information about the connecting client. I haven't played with these events, but at least based on the docs [1], auth_client_userdb_lookup_finished and auth_client_passdb_lookup_finished events seem to have the remote_ip field as well as an error string on failure. Does that give you the info you need? Jeff. [1] https://doc.dovecot.org/admin_manual/list_of_events/