No (sys)log entries for failed mail delivery

Question

Hello everybody, 
 i recently deployed a Sophos XG Firewall SFV4C6 (SFOS 18.0.0 GA-Build354.HF051220.1). I have configured a Syslog-server which should receive anything possible under the sun (everything checked under "Log settings", Severity level "Debug" - at least temporary). 
 The Syslog server receives a lot of information but not the crucial information we are looking for: A mail that can't be delivered. I see the log entry where the XG Firewall accepts the mail and the one which states it has been successfully delivered. But if the XG Firewall can't deliver the mail there is no log entry on the Syslog server and no log entry on the XG Firewalls own Log viewer: 
 
 If i check the Mail logs i can see an appropriate log entry: 
 
 Is it possible to have a log entry for mails that couldn't be delivered? 
 Kind regards, 
 Marco 
 
 /edit: grammar

Keyur · Accepted Answer

Hi CiG Unfortunately, the requested Syslog is not available as per your requirement in the Sophos XG, you may submit your request to ideas.sophos.com. You may check SMTP log through Sophos XG Advanced Shell available through SSH access and check the logs by tail or less command, the log file is smtpd_main.log 
 Connecting to the advanced shell 
 
 To connect using SSH, you may use any SSH client to connect to port 22 of the SFOS device. 
 Select option 5 Device Management . 
 Select option 3 Advanced Shell . 
 
 For more info - https://community.sophos.com/kb/en-us/123185

CiG · Answer

For those curious: 
 As a workaround until this feature is implemented we have a Windows server task copy the smtpd_main.log to a local share every day using pscp. There our logging-software can import the file and generate a report on the mails which failed to send. 
 Copyscript: 
 C:\scripts\GetSMTPLogs\bin\pscp.exe -pw password -scp admin@ IPofSophosXGFirewall :/log/smtpd_main.log C:\scripts\GetSMTPLogs\Logs\smtpd_main.log 
 The password will be saved in cleartext though.