The following pattern string should work for Mac OS X Server
10.3.9:
$pat = '^(... .. ..:..:..) \S+ (?:imaps|pop3s|imap|pop3)[\d+]: ' .
'login:.+[(\d+.\d+.\d+.\d+)] \S+ \S+ User logged in';
Anonymous