The grok/regex patterns for exim logs has already paid off, spotted a big institutions mail servers not doing SSL/TLS right! Can't wait to have this actually in production #ELK