anchor.diff:    <Match>
       Regex "\\<554 5\\.7\\.1\\>"
       DSType "CounterInc"
  -    Type "mail_counter"
  +    Type "derive"
       Instance "rejected"
     </Match>
     <Match>
       Regex "\\<450 4\\.7\\.1\\>.*Helo command rejected: Host not found\\>"
       DSType "CounterInc"
  -    Type "mail_counter"
  +    Type "derive"
       Instance "rejected-host_not_found"
     </Match>
     <Match>
       Regex "\\<450 4\\.7\\.1\\>.*Client host rejected: No DNS entries for your MTA, HELO and Domain\\>"
       DSType "CounterInc"
  -    Type "mail_counter"
  +    Type "derive"
       Instance "rejected-no_dns_entry"
     </Match>
      <Match>
        Regex "\\<450 4\\.7\\.1\\>.*Client host rejected: Mail appeared to be SPAM or forged\\>"
        DSType "CounterInc"
  -     Type "mail_counter"
  +     Type "derive"
        Instance "rejected-spam_or_forged"
      </Match>
   
  
positive.code: <Plugin tail>
  <File "/var/log/mail.log">
  # or: <File "/srv/rsyslog/mail.log">
  
negative.code:   <Match>
      Regex "status=deferred"
      DSType "CounterInc"
      Type "derive"
      Instance "status-deferred"
    </Match>
    <Match>
      Regex "status=forwarded"
      DSType "CounterInc"
      Type "derive"
      Instance "status-forwarded"
    </Match>
    <Match>
      Regex "status=reject"
      DSType "CounterInc"
      Type "derive"
      Instance "status-reject"
    </Match>
    <Match>
      Regex "status=sent"
      DSType "CounterInc"
      Type "derive"
      Instance "status-sent"
    </Match>
    <Match>
      Regex "status=bounced"
      DSType "CounterInc"
      Type "derive"
      Instance "status-bounced"
    </Match>
    <Match>
      Regex "status=SOFTBOUNCE"
      DSType "CounterInc"
      Type "derive"
      Instance "status-softbounce"
    </Match>
  
  