Sebastian, I believe this is sort of already in place. When a message comes in from the outside (whether it be an external server or an end user's email client) you will find it in the SMTP logs. If that message is destined for a local account on the server or needs to be relayed outside of the server, you'll then find it in the Delivery logs. Does this help?

Hi Kyle

I want a way to separate to and from entries 

[2021.03.23] 01:59:21.326 [209.61.151.222][45653674] cmd: RCPT TO:<slee@service2client.com>
[2021.03.23] 02:00:27.742 [23.83.209.75][24312839] cmd: MAIL FROM:<slee@service2client.com>

I don't understand.   These are part of a single transaction.   MAILFROM is the SMTP address of the sender.  RCPT TO is the identity of the intended recipient.   So they belong together.

Hello Douglas,

I think this is a different transaction [45653674]  and  [24312839] are two different sessions.

Kind regards.

Thanks from Sebastian to Sebastien :)  Great name btw! Yes, this is what I'm requesting. If you have needed to track down a specific email transaction, it would be much faster if you could remove half or more of the report's transactions.

First, I agree on the names! You're both awesome to work with, it must run in the spelling ;-) I've generated a ticket on this post so we can get it submitted as a feature request. Have a good one!