i have some imap inputs in logstash and i receive messages like this
... Service unavailable; Client host [192.168.1.1] blocked using ...
and i want to search by Client host [ip address].
how can i do the search i try message:" Client host [...]" but it doesn't grab the ip address
is there a way to do this search?