ESA Report on messages sent per interface

[fiona.kannengiesser]

We have the requirement to report on how many messages get sent externally per IP address. We have around 30 interfaces on the Ironport and need to know how many messages are sent from each of them on a daily basis.

I can't see a way to get this information from the standard reporting and am hoping that it is possible via an API. We have C600V's and an M170 in our environment. It would be preferred to get the report via the M170 as we have centralised logging enabled, but will do directly from C600V if required.

Has anyone ever tried to do this?

[Libin Varghese]

I do not see reporting per interface as a possibility at the moment.

You may want to parse the mail_logs on individual ESA's (logs are not centralised to the SMA) to look at each delivery connection (DCID) created which lists the interface connection is created from and the destination IP.

grep "New SMTP DCID" mail_logs