Hello Martin, first test results from our system show that two more common log entries are not ignored by logcheck:
Nov 22 14:24:29 imapsrv dovecot: auth(default): client in: CONT<hidden> Nov 22 14:24:29 imapsrv dovecot: auth(default): client out: CONT 1 AAa0a000aaA0 Regards, Stefan.