Introduction

Introduction

MailLogSentinel is a lightweight Python tool that watches Postfix SASL failures. Under systemd, it tails the mail log incrementally (near-real time), appends parsed events to a CSV, then a daily email summarizes activity.

Operating model

• Continuous ingestion (systemd service): long-running tail with incremental parsing.
• Data sink (CSV): normalized schema (see Data Schema page).
• Daily report (systemd timer): composes and sends a daily summary email.