I have an e-mail in my logline. The logline looks like that:
SMTP error from remote mail server after RCPT TO:<user@domain.com>:
host domain.com [xx.xx.xx.xx]: 550-Please turn on SMTP Authentication in your mail client.
550-(host.domain.com) [yy.yy.yy.yy]: __ is not permitted to relay through this server without authentication.
iam only interested into the e-mail adress. So I take gsub to remove TO:<.
update => { "exim_msg_state" => "error" } this is just only a kind of failre counter, so its not connected with gsub.
For more information see here Issue in Controls - #23 by moep
What I dont understand is, where the syntax error is.