Can someone help with expressions?
I get this in syslog
Code:Apr 24 15:40:48 servername squirrelmail: Failed webmail login: by N/A (domain.com) at 126.96.36.199 on 04/24/2013 14:40:48: Unknown user or password incorrect.
It looks like the docs are outdated as it says filter should look like
But that does nothingCode:failregex = \[webmail\].*at <HOST>: Unknown user or password incorrect