nxhack / logstash Goto Github PK

My zimbra mailbox.log has some logs like this:
2016-07-13 16:30:38,695 INFO [Imap-Idle-Proxy-ImapServer-792] [] imap - dropping connection for user [email protected] (server-initiated)
To solve this, I just had to modify ZIMBRA_COMPONET and include the alternative:
ZIMBRA_COMPONET Timer-Zimbra|Junk-NotJunk-Handler|MailboxPurge|btpool|pool|LmtpServer|ImapServer|ImapSSLServer|Imap-Idle-Proxy-ImapServer|Pop3Server|Pop3SSLServer|ScheduledTask|AnonymousIoService|CloudRoutingReaderThread|GC|SocketAcceptor|Thread|Index|FileLogWriter.FsyncThread|IncomingDirectorySweeper|mailboxd.csv|main|SyncGalGroup|%{WORD}

I think you have misspelled word error on sshd pattern SSHD_SUCSESS -> SSHD_SUCCESS

Hi Nx,

It is a very great script but missing the how to use part as I am still struggling to setup of your files on two different system.
Looking for a small how to doc to help me out.
Thanks in advance