Hi All,
new to fail2ban - all working perfectly with ONE exception… I have multiple entries in my /var/log/secure:

error retrieving information about user



I have created a new filter and put: 

[Definition]
failregex = (?i):dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user ([A-Za-z0-9-]+).*rip=(?P<host>\S*),.*
ignoreregex =


but it does not work - can someone please help me with what it should say please?

regards
steve