[INCLUDES] before = common.conf [Definition] _daemon = maddy failregex = authentication failed\s{"reason":"auth: invalid credentials","src_ip":" journalmatch = _SYSTEMD_UNIT=maddy.service