elk setup for zimbra. ELK setup by following this guide: https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04
Logstash configuration files Sources: https://github.com/ITLinuxCL/zimbra_logstash Sources: https://github.com/nxhack/logstash
I used a combination of information from the above Repos to put this together. There are still a lot of bugs and improvements to be made on my version. Especially grok patterns for SMTP auth logs