I actually rewrote the pop-before-smtp configuration to support standard multi-line logging, no need to update the log4j properties.
Refer to the blog posting for the latest updated information:
http://www.mnxsolutions.com/blog/lin...ion-howto.html
Use these rules in place of $pat and $out_pat in step 1:
$PID_pat = ‘^[LOGTIME],\d+\ INFO \[Pop3[A-Za-z]+-(\d+)\] ‘;
$IP_pat = $PID_pat . ‘\[ip=(\d+\.\d+\.\d+\.\d+);\] pop \- connected’;
$OK_pat = $PID_pat . ‘\[name=[A-Za-z0-9._%-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4};\] pop \- user [A-Za-z0-9._%-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4} authenticated, mechanism=[A-Za-z]+’;
$FAIL_pat='sdfsdf';