{
 "processors": [
   {
      "pipeline" : {
        "name": "maillog"
      }
    },
    {
      "pipeline" : {
        "name": "amavis"
      }
    },
    {
      "pipeline" : {
        "name": "mailboxlog"
      }
    },
    {
      "pipeline" : {
        "name": "zimbralog"
      }
    },
    {
      "pipeline" : {
        "name": "fail2ban"
      }
    },
    {
      "geoip" : {
        "field" : "mail.remote_ip",
        "ignore_missing" : true
      }
    },
    {
      "geoip" : {
        "field" : "f2b.remote_ip",
        "ignore_missing" : true
      }
    }
  ]
}