Longer history in rspamd possible?

enriluis

For security and forensic purposes, we need to maintain Rspamd history for at least 5 years. In our current pre-Mailcow setup, we’ve successfully achieved this using MailWatch (MailScanner’s UI), which stores all logs in a searchable MySQL database.
As we plan our Mailcow migration, we need to implement equivalent functionality. While Mailcow defaults to Redis for Rspamd, we specifically require MySQL storage to maintain our existing workflows. The key requirements are:
Long-term retention (5+ years)
Full-text search capabilities
Forensic analysis compatibility
I’m particularly interested in hearing from others who may have:
Configured Rspamd to use MySQL instead of Redis
Integrated MailWatch or similar logging solutions with Mailcow
Developed alternative approaches for historical analysis within Mailcow
This functionality is critical for us as we cross-reference these logs with our MailPiler email archives. Any implementation experiences or architectural suggestions would be greatly appreciated as we want to ensure we don’t lose existing capabilities during migration.

ETNyx

You can forward logs from Mailcow to external logging service. First you need to configure your containers, please refer to mailcow docs and docker doc, from there you can go multiple ways,..

You can use some kind of exporter to your MySQL database, think Logstash can perform this. But as I do push to another service (paid in cloud or preferably self-hosted) specifically build for logging and observability for example Loki/Grafana or Logstash/Elastic or Graylog or something else

These services can collect more, like CPU, RAM, IO usage, telemetry from website apps (if you have any), you can make alerting for plenty of stuff host is down, database is slow,…

Also just notice there is at least partially Grafana solution in docs now,…