# Filter pattern for kibana (zimbra) **URL:** \ **Category:** Kibana\ **Created:** [April 5, 2017, 6:04pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357 "2017-04-05T18:04:10Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![mhamed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mhamed/32/16332_2.png) [@mhamed](https://discuss.elastic.co/u/mhamed)\ **Post date:** [April 5, 2017, 6:04pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/1 "2017-04-05T18:04:10Z")
hey any idea about filter and pattern for kibana to display zimbra logs ?? ---
**Author:** ![Court](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/court/32/6640_2.png) [@Court](https://discuss.elastic.co/u/Court)\ **Post date:** [April 5, 2017, 6:46pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/2 "2017-04-05T18:46:10Z")
Can you provide more details about what you're trying to do with Kibana? I'm not sure what you're trying to find out here. ---
**Author:** ![mhamed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mhamed/32/16332_2.png) [@mhamed](https://discuss.elastic.co/u/mhamed)\ **Post date:** [April 6, 2017, 7:08am UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/3 "2017-04-06T07:08:20Z")
i am trying to filter zimbra log files ( /opt/zimbra/log/mailbox.log ) using logstash grok to extract some fields like client ip ,sender,recipient,msgid.... ---
**Author:** ![Court](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/court/32/6640_2.png) [@Court](https://discuss.elastic.co/u/Court)\ **Post date:** [April 6, 2017, 11:39pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/4 "2017-04-06T23:39:38Z")
Ah, sorry, I don't know anything about zimbra or its logging format. Can you provide some example logs? Also, I think this question is probably best suited for the logstash forum instead of Kibana, so I'm going to move this over there to make sure it gets more exposure to folks that live and breathe pipelines. ---
**Author:** ![Court](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/court/32/6640_2.png) [@Court](https://discuss.elastic.co/u/Court)\ **Post date:** [April 6, 2017, 11:41pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/5 "2017-04-06T23:41:57Z")
Actually, upon re-reading this thread, I'm still not clear on what the problem is, so I won't move this to the logstash forums just yet. Have you successfully used logstash to index your data into Elasticsearch, or are you seeking help with setting up the correct logstash filters in order to parse those logs into structured data? ---
**Author:** ![mhamed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mhamed/32/16332_2.png) [@mhamed](https://discuss.elastic.co/u/mhamed)\ **Post date:** [April 6, 2017, 11:53pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/6 "2017-04-06T23:53:49Z")
This is some logs from mailbox.log 2017-03-13 11:50:37,038 INFO [LmtpServer-4] [ip=192.168.1.102;] lmtp - Delivering message: size=1520 bytes, nrcpts=1, [sender=admin@server.tn](mailto:sender=admin@server.tn), msgid=[20170313103223.B3A2F412FF41@zimbra.server.tn](mailto:20170313103223.B3A2F412FF41@zimbra.server.tn) 2017-03-13 11:50:37,040 INFO [LmtpServer-5] [ip=192.168.1.102;] lmtp - Delivering message: size=1507 bytes, nrcpts=1, [sender=admin@server.tn](mailto:sender=admin@server.tn), msgid=[20170313103227.16434412FF5E@zimbra.server.tn](mailto:20170313103227.16434412FF5E@zimbra.server.tn) 2017-03-13 11:50:37,040 INFO [LmtpServer-2] [ip=192.168.1.102;] lmtp - Delivering message: size=1510 bytes, nrcpts=1, [sender=admin@server.tn](mailto:sender=admin@server.tn), msgid=[20170313103223.403D5412FF58@zimbra.server.tn](mailto:20170313103223.403D5412FF58@zimbra.server.tn) ---
**Author:** ![mhamed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mhamed/32/16332_2.png) [@mhamed](https://discuss.elastic.co/u/mhamed)\ **Post date:** [April 7, 2017, 12:02am UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/7 "2017-04-07T00:02:19Z")
I'm seekin help with setting up the correct logstash filters in order to parse those logs into structured data ---
**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\ **Post date:** [April 7, 2017, 6:28pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/8 "2017-04-07T18:28:08Z")
Hi Mhamed, Can you please post this question in logstash category? Here: [https://discuss.elastic.co/c/logstash](https://discuss.elastic.co/c/logstash) They will be able to help you out. Cheers, Bhavya ---
**Author:** ![mhamed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mhamed/32/16332_2.png) [@mhamed](https://discuss.elastic.co/u/mhamed)\ **Post date:** [April 7, 2017, 9:11pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/9 "2017-04-07T21:11:07Z")
Done ..thank you 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 5, 2017, 9:15pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357/10 "2017-05-05T21:15:39Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.