<group name="mimecast,">
 <rule id="200940" level="3">
    <field name="integration">mimecast</field>
    <description>Mimecast Integration Logs</description>
    <options>no_full_log</options>
  </rule>
</group>
