• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Forwarded to devs Duplicate entries in maillog

uniauto

Basic Pleskian
User name: uniauto

TITLE

Duplicate entries in maillog

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

Plesk Obsidian 18.0.25 Update #2, Debian 9.12‬

PROBLEM DESCRIPTION

All entries in maillog have doubled

STEPS TO REPRODUCE

tail /var/log/maillog

ACTUAL RESULT

Mar 30 18:00:08 webmail dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=14716, TLS, session=<KGbix44iGrF/AAAB>
Mar 30 18:00:08 webmail dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=14716, TLS, session=<KGbix44iGrF/AAAB>
Mar 30 18:00:08 webmail dovecot: service=imap, user=[email protected], ip=[127.0.0.1]. Logged out rcvd=377, sent=37086
Mar 30 18:00:08 webmail dovecot: service=imap, user=[email protected], ip=[127.0.0.1]. Logged out rcvd=377, sent=37086

EXPECTED RESULT

Mar 30 18:00:08 webmail dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=14716, TLS, session=<KGbix44iGrF/AAAB>
Mar 30 18:00:08 webmail dovecot: service=imap, user=[email protected], ip=[127.0.0.1]. Logged out rcvd=377, sent=37086

ANY ADDITIONAL INFORMATION

Found duplicate instance of "mail.* -/var/log/maillog" in files:
/etc/rsyslog.conf
/etc/rsyslog.d/plesk-mail.conf


Posible fix: remove /etc/rsyslog.d/plesk-mail.conf

YOUR EXPECTATIONS FROM PLESK SERVICE TEAM

Confirm bug
 
From developer:

Could not confirm bug as duplicated entries in the same file. Debian 9 out of the box configures /var/log/mail.log, Plesk - /var/log/maillog. Earlier I saw 2 files simultaneously with similar entries, but do not face such problem on a new test instance. Is that server has long Plesk upgrade history?
 
Not long (like 6months), its an VPS from OVH, Plesk Onyx on Debian 8 immediately updated to Debian 9 and Plesk Obsidian 18.0.20.
 
Most probably the issue is caused by dist upgrade.
 
Last edited:
Same issue here in two Debian 8, and Plesk 18.0.26 servers.

I have also both entries in /etc/rsyslog.conf and /etc/rsyslog.d/plesk-mail.conf refering to mail log (mail.* -/var/log/maillog)

They came from Plesk Onix and where upgraded to Obsidian following the plesk upgrade link inside the panel.
 
Just checked the logfiles on our Debian9 server as well, and here we see the duplicate entries also.
And this for sure has nothing to do with a dist-upgrade, as this server was Debian9 from the get-go and this problem must be relatively new. (because I remember/know this was not always the case)


Ahh, looks like it's caused by the file /etc/rsyslog.d/plesk-mail.conf that was added to Plesk/Debian9 in October 2019 or so.
This one defines the /var/log/maillog location as well as the /etc/rsyslog.conf file that was used/adjusted by Plesk/Debian9 before that

So in order to fix this problems (that seems to happen only for Debian9 servers that were installed before Q4 2019) I recommend that you comment this line in /etc/rsyslog.conf that defined the /var/log/maillog location
 
  • Like
Reactions: mow
Same problem on two Debian 8.11 servers, both using Plesk Obsidian, one 18.0.26 and the other 18.0.27.

In both cases, the solution presented by @ChristophRo did the trick! :cool:
 
Interesting that the double log entry issue does not occur in Ubuntu 20.04, but we see it in CentOS 8.
 
Most probably the issue is caused by dist upgrade.
No, it is caused by plesk upgrade. The file appeared when plesk upgraded itself from onyx to obsidian 18.0.35 on May 25th (debian 9).
Which created /etc/rsyslog.d/plesk-mail.conf but didn't remove the entry in /etc/rsyslog.conf.

That this happened more than a year after the issue was first reported is not really encouraging.
 
Back
Top