The tags beginning with mail.dovecot
identify events generated by Dovecot.
The full tag must have 3 levels. The first two are fixed as mail.dovecot
. The third level identifies the type of events sent.
These are the valid tags and corresponding data tables that will receive the parsers' data:
Product / Service | Tags | Data tables |
---|---|---|
Dovecot email server |
|
|
For more information, read more About Devo tags.
Data should be sent using the relay.
Source port: 514 Source message: Source data: Source tag: Target tag: mail.dovecot.audit Sent without syslog tag: true Stop processing: false |
These are the fields displayed in this table:
Field | Type | Source field name | Extra fields |
---|---|---|---|
eventdate |
|
| |
serverName |
| vapp | |
rawMessage |
|
| |
month |
|
| |
day |
|
| |
time |
|
| |
machine |
|
| |
application |
|
| |
actionSource |
|
| |
actionStatus |
|
| |
custMsg |
|
| ✓ |
hostchain |
|
| ✓ |
tag |
|
| ✓ |