This tails Dovecot auth, IMAP, and Sieve log lines in real time. Combined with --tail=50 you see context before the newest entries. Watch for repeated LOGIN failures, which point at brute-force attempts or broken clients.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.