This appears to be a bug in the /opt/zimbra/libexec/zmlogger for MacOSX. This prevents syslog data from being parsed and inserted into the database.
The following...
Code:
if ($platform =~ /^MAC/) {
$logregex = qr/(^.{15}) \d+\.\d+\.\d+\.\d+ (\S+) ([^[]+)\[(\d+)\]: (.*)$/o;
} else {
$logregex = qr/(^.{15}) (\S+) ([^[]+)\[(\d+)\]: (.*)$/o;
} should be
Code:
$logregex = qr/(^.{15}) (\S+) ([^[]+)\[(\d+)\]: (.*)$/o; Bug 10917 was filed to track this issue.