-dovecot: deliver\([-a-z]*\): sieve: msgid=<[^>]*>: stored mail into mailbox '[^']*'$
+dovecot: deliver\([-a-z]*\): sieve: msgid=.*: stored mail into mailbox '[^']*'$
+dovecot: deliver\([-a-z]*\): msgid=[^:]*: saved mail to .*$
+dovecot-auth: pam_unix\(dovecot:session\): session opened for user [-a-z]* by \(uid=0\)$
+dovecot-auth: pam_unix\(dovecot:session\): session opened for user [-a-z]*$
+dovecot-auth: pam_unix\(dovecot:session\): session closed for user [-a-z]*$
+dovecot: IMAP\([-a-z]*\): Connection closed bytes=[0-9/]*$
+dovecot: IMAP\([-a-z]*\): Connection closed: Connection reset by peer bytes=[0-9/]*$
+dovecot: IMAP\([-a-z]*\): Disconnected: Logged out bytes=[0-9/]*$
+dovecot: IMAP\([-a-z]*\): Disconnected in IDLE bytes=[0-9/]*$
+dovecot: IMAP\([-a-z]*\): Disconnected for inactivity bytes=[0-9/]*$
+dovecot: imap-login: Disconnected (no auth attempts): rip=[0-9.]*, lip=[0-9.]*, TLS$
+dovecot: imap-login: Disconnected \(no auth attempts\): rip=[0-9.]*, lip=[0-9.]*, TLS: Disconnected$
+dovecot: imap-login: Disconnected \(no auth attempts\): rip=[0-9.]*, lip=[0-9.]*, TLS handshaking: Disconnected$