GRAYLOG_hMailServer_Extractors.json

{
  "extractors": [
    {
      "title": "hMailServer",
      "extractor_type": "grok",
      "converters": [],
      "order": 0,
      "cursor_strategy": "copy",
      "source_field": "message",
      "target_field": "",
      "extractor_config": {
        "grok_pattern": "%{HOSTNAME:sname} %{DATA:process}: \\\"%{DATA:objectname}\\\"\t%{DATA:vmid}\t%{DATA:session}\t\\\"%{DATA:logstamp}\\\"\t\\\"%{IPV4:sip}\\\"\t\\\"%{DATA:command}\\\" \\[%{DATA:object}\\]"
      },
      "condition_type": "string",
      "condition_value": "CHANGE-ME-HMAILSERVER-HOSTNAME"
    },
  ],
  "version": "2.2.0-SNAPSHOT"
}