-dovecot: deliver\([-a-z]*\): sieve: msgid=[^:]*: stored mail into mailbox '[^']*'$
+dovecot: deliver\([-a-z]*\): sieve: msgid=.*: stored mail into mailbox '[^']*'$
+dovecot: deliver\([-a-z]*\): msgid=[^:]*: saved mail to .*$
dovecot-auth: pam_unix\(dovecot:session\): session opened for user [-a-z]* by \(uid=0\)$
dovecot-auth: pam_unix\(dovecot:session\): session opened for user [-a-z]*$
dovecot-auth: pam_unix\(dovecot:session\): session closed for user [-a-z]*$
dovecot: IMAP\([-a-z]*\): Disconnected: Logged out bytes=[0-9/]*$
dovecot: IMAP\([-a-z]*\): Disconnected in IDLE bytes=[0-9/]*$
dovecot: IMAP\([-a-z]*\): Disconnected for inactivity bytes=[0-9/]*$
+dovecot: imap-login: Disconnected (no auth attempts): rip=[0-9.]*, lip=[0-9.]*, TLS$
+dovecot: imap-login: Disconnected \(no auth attempts\): rip=[0-9.]*, lip=[0-9.]*, TLS: Disconnected$
+dovecot: imap-login: Disconnected \(no auth attempts\): rip=[0-9.]*, lip=[0-9.]*, TLS handshaking: Disconnected$