diff --git a/files/logs/sasl b/files/logs/sasl
new file mode 100644
index 00000000..fb455397
--- /dev/null
+++ b/files/logs/sasl
@@ -0,0 +1,3 @@
+#1 Example from postfix from dbts #507990
+Dec  2 22:24:22 hel postfix/smtpd[7676]: warning: 114-44-142-233.dynamic.hinet.net[114.44.142.233]: SASL CRAM-MD5 authentication failed: PDc3OTEwNTkyNTEyMzA2NDIuMTIyODI1MzA2MUBoZWw+
+