Hello
When an user log into webmail (horde or roundcube), the maillog not recover the exact data, it appear something like this :
Jan 16 10:39:58 020 dovecot: imap-login: Login: user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=8609, TLS...