How to purge Rspamd log file with bad entries

voncaron

Hi everyone,

I’ve encountered an issue with my new Mailcow installation where several log entries appear with future timestamps. These entries are disrupting the statistical analysis and rendering the statistics inaccurate.

The problematic entries originate from the Rspamd log (see attached screenshot).

I would appreciate any guidance or suggestions on how to remove or correct these entries to restore accurate statistics.

Thank you in advance for your support!
Jo

pkernstock

Are all entries and emails with wrong timestamp. or only the one from watchdog? I assume the system time is correct?

voncaron

Hi,

Thanks for your input! The system time is correct, and all other entries have the correct timestamps. It’s only the four watchdog entries that are affected and appear before all others.

I’ve also found some additional information in the container id json.log file:

{"log":"2025-04-06 10:02:29 #39(controller) \u003c8eb792\u003e; csession; rspamd_task_write_log: id: \u003cundef\u003e, (default: F (soft reject): [0.00/9999.00] [GREYLIST(0.00){greylisted;Mon, 06 May 2120 20:48:34 GMT;too early;}]), len: 52, time: 0.763ms, dns req: 0, digest: \u003c593fbedc45b4499d86efc2599f6a4002\u003e, mime_rcpts: \u003cnull@localhost\u003e, forced: soft reject \"Greylisted, please try again later\"; score=nan (set by greylist)\n","stream":"stderr","time":"2025-04-06T08:02:29.559081483Z"}

I’m particularly interested in this part:

greylisted;Mon, 06 May 2120 20:48:34 GMT;too early;

Thanks for any ideas or suggestions!
Jo

voncaron

Hi everyone,

Thanks for your feedback and suggestions.

In the meantime, I’ve observed that the entries with the incorrect future timestamps have disappeared on their own over time. It seems the statistics are now gradually correcting themselves.

Appreciate the support from the community!

Best regards,
Jo