marianogg9 · April 14, 2014 18:21
diff --git a/grok-patterns b/grok-patterns
 # Custom patterns
 TIMEX [0-9][0-9]:[0-9][0-9]:[0-9][0-9]
 EMAIL [a-z0-9._%+-]+@[a-z0-9.-]+\.[a-z]{2,4}
 DSN [0-9][.][0-9][.][0-9]

 #SENDMAIL %{SYSLOGBASE} %{SYSLOGPROG}: to=(?:%{WORD:recipient}|<%{EMAIL:to}>), (%{WORD}=%{DATA},) stat=%{GREEDYDATA:status}

 SENDMAIL %{SYSLOGBASE} %{SYSLOGPROG}: to=<%{EMAIL:to}>, delay=%{TIMEX:delay}, xdelay=%{TIMEX:xdelay}, mailer=%{WORD:mailer}, pri=%{NUMBER:pri}, relay=%{IPORHOST:relay} \[%{IP}\], dsn=%{DSN:dsn}, stat=%{GREEDYDATA:status}
	# Custom patterns
	TIMEX [0-9][0-9]:[0-9][0-9]:[0-9][0-9]
	EMAIL [a-z0-9._%+-]+@[a-z0-9.-]+\.[a-z]{2,4}
	DSN [0-9][.][0-9][.][0-9]

	#SENDMAIL %{SYSLOGBASE} %{SYSLOGPROG}: to=(?:%{WORD:recipient}\|<%{EMAIL:to}>), (%{WORD}=%{DATA},) stat=%{GREEDYDATA:status}

	SENDMAIL %{SYSLOGBASE} %{SYSLOGPROG}: to=<%{EMAIL:to}>, delay=%{TIMEX:delay}, xdelay=%{TIMEX:xdelay}, mailer=%{WORD:mailer}, pri=%{NUMBER:pri}, relay=%{IPORHOST:relay} \[%{IP}\], dsn=%{DSN:dsn}, stat=%{GREEDYDATA:status}