Blue Flower

sar -q -f /var/log/sa/sa08 | perl -lne 'while (<>){@sp =split (/\s+/);if ($sp[3]>10){print "$sp[0]\t$sp[3]"}};'

oder

tailf /var/log/maillog | perl -lne 'while (<>){@sp =split (/\s+/); if ($sp[8] =~ m/RelayedInternal|RelayedInbound/ and $sp[11] =~ m/\@/ and $sp[13] =~ m/\@/){print "$sp[2]\t$sp[10]\t$sp[11]\t$sp[13]"}}'