Reply to comment

only that line?

So, there is only the disconnected line, and no Aborted message? Sounds strange, but I don't use dovecot, so not sure. In any case, that pattern looks very much like the existing patterns, so just a simple edit might work - not tested:

    "dovecot-LoginFailRipDisconnect":
        r'{LOG_PREFIX{dovecot}} pop3-login: Disconnected: .* rip={HOST_IP}',

Reply

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <img> <b> <span> <pre> <hr>
  • Lines and paragraphs break automatically.
  • You may use [acidfree:xx] tags to display acidfree videos or images inline.
  • [l:URL text] input tags replaced with HTML links. URL may be Drupal internal path. [ Link Filter Tips ]

More information about formatting options