I am using Kerio mailserver and trying to get the date/time string to work. (www.kerio.com) is the vendors website. Can you assist in the proper syntax?
I currently have
timepattern = %d/%b/%Y %H:%M:%S
failregex = Failed (POP3|IMAP) login from <HOST>
but get the following output when I test it.
Found a match for '[03/Jun/2010 01:15:52] Failed POP3 login from 220.127.116.11
' but no valid date/time found for '[03/Jun/2010 01:15:52] Failed POP3 login from 18.104.22.168
'. Please contact the author in order to get support for this format