我从邮件日志文件中得到以下结果
Oct 11 11:22:04 sgssr2 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xxxxx@xxxx.com>, method=PLAIN, rip=112.207.101.236, lip=103.227.176.10, session=<Gvo7eet3C3Zwz2Xs>
我怎样才能只在薄片下获得grep并跳过其他详细信息
1. auth failed
2. user=
3. rip=