# Exim\_Main logs ingest pipeline

**URL:** <https://discuss.elastic.co/t/exim-main-logs-ingest-pipeline/364698>\
**Category:** Kibana\
**Created:** [August 9, 2024, 3:53pm UTC](https://discuss.elastic.co/t/exim-main-logs-ingest-pipeline/364698 "2024-08-09T15:53:20Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![gareth-armstrong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gareth-armstrong/32/136687_2.png) [@gareth-armstrong](https://discuss.elastic.co/u/gareth-armstrong)\
**Post date:** [August 9, 2024, 3:53pm UTC](https://discuss.elastic.co/t/exim-main-logs-ingest-pipeline/364698/1 "2024-08-09T15:53:20Z")

</div>

Hi guys,

I've got 4 exim servers that I want to collect the exim\_main log data from, and then present it in grafana dashboards, or possibly run investigations from the data in support of some email related issues that might be reported. I have created a custom log integration, but have found it incredibly difficult to process the log messages. Currently I've been limited to pulling out a handful of fields using a dissect, and then pushing the rest of the log message into a %{rest} field. Is there a better way of collecting these logs?

Thanks!  
Gareth