Hey @Viktor Vogel , thanks for the reply. Did what you requested, here's the result:
Mar 16 09:16:23 cp001 dovecot: service=imap,
[email protected], ip=[::1]. sieve: pipe action: piped message to program `es-learn-spam.sh'
Mar 16 09:16:23 cp001 dovecot: service=imap...