David Jonas writes:
Or perhaps similar to postfix, like dovecot/deliver[pid]:
I think that one would be the best scenario.
On 19:52:38 2007-04-03 David Jonas <[EMAIL PROTECTED]> wrote:
> David Lee wrote:
> > We do some routine logfile (syslog) gathering and analysis. I've been
> > looking at extending this to parse the syslog output of dovecot.
> > Hmmm... ...
> > For instance:
> > 1. All lines, including the "deliver
David Lee wrote:
> We do some routine logfile (syslog) gathering and analysis. I've been
> looking at extending this to parse the syslog output of dovecot. Hmmm...
> ...
> For instance:
> 1. All lines, including the "deliver", to begin "dovecot:";
> 2. The "IMAP(): Disconnected" to become "im
We do some routine logfile (syslog) gathering and analysis. I've been
looking at extending this to parse the syslog output of dovecot. Hmmm...
Ignoring the leading 'date hostname' prefix, some sample lines are:
dovecot: imap-login: Login: user=, method=PLAIN, rip=dd.dd.dd.dd,
lip=dd.dd.dd.d
