Package: logwatch Version: 7.4.3+git20161207-2 Severity: normal I recently upgraded dovecot-sieve to version 1:2.3.2.1-1 (in buster) and logwatch is failing to match the sieve log lines. Example sieve log lines are:
Aug 13 15:08:02 black dovecot: lda(cobb)<26533><5ecUM8GQcVulZwAAy7SJiA>: sieve: msgid=unspecified: stored mail into mailbox 'INBOX' Aug 13 15:16:50 black dovecot: lda(cobb)<26989><j3ssLdGScVttaQAAy7SJiA>: sieve: msgid=<20180813141530.de7ba20...@smtp.hushmail.com>: stored mail into mailbox 'INBOX' The following change to the dovecot script works for me: --- dovecot 2018-08-13 15:35:42.869962064 +0100 +++ /usr/share/logwatch/scripts/services/dovecot 2017-01-21 16:44:03.000000000 +0000 @@ -221,7 +221,7 @@ $Deliver{$User}{$Mailbox}++; # For Sieve-based delivery - } elsif (my ($User, $Mailbox) = ( $ThisLine =~ /^$dovecottag (?:lda|deliver)\((.*)\).*: sieve: msgid=.*: stored mail into mailbox '(.*)'/ ) ) { + } elsif (my ($User, $Mailbox) = ( $ThisLine =~ /^$dovecottag (?:lda|deliver)\((.*)\): sieve: msgid=.*: stored mail into mailbox '(.*)'/ ) ) { $Deliver{$User}{$Mailbox}++; # LMTP-based delivery -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.15.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8) (ignored: LC_ALL set to en_IE.utf8), LANGUAGE=en_IE.utf8 (charmap=UTF-8) (ignored: LC_ALL set to en_IE.utf8) Shell: /bin/sh linked to /bin/bash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages logwatch depends on: ii perl 5.26.1-6 ii postfix [mail-transport-agent] 3.3.0-1 Versions of packages logwatch recommends: ii libdate-manip-perl 6.72-1 pn libsys-cpu-perl <none> ii libsys-meminfo-perl 0.99-1+b2 Versions of packages logwatch suggests: ii fortune-mod 1:1.99.1-7+b1 -- no debconf information