[Dovecot] Tracing an IP of a user who deleted the message

[Eugene Gladchenko]

Hello,

Dovecot writes to the log file lines like these:

May 10 13:19:04 mailserver dovecot: IMAP(office): copy -> Trash: uid=1131, msgid=<45E669BE.8090705 at example.com>, box=Sent
May 10 13:19:05 mailserver dovecot: IMAP(office): deleted: uid=1131, msgid=<45E669BE.8090705 at example.com>, box=Sent
May 10 13:53:08 mailserver dovecot: IMAP(office): copy -> Trash: uid=1719, msgid=<002701b483f5$7aa257e0$23833bda at example.com>
May 10 13:53:08 mailserver dovecot: IMAP(office): deleted: uid=1719, msgid=<002701b483f5$7aa257e0$23833bda at example.com>

I've got a bunch of users that work with the login 'office'. Is it
possible to determine the IP of the user that deleted messages? If not,
what can be done about it in the future?

Thank you.

-- 
Eugene Gladchenko
EVG15-RIPE