^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sudo:[[:space:]]+nagios : PWD=[^;]+ ; USER=[._[:alnum:]-]+( ; GROUP=[._[:alnum:]-]+)? ; COMMAND=/usr/bin/mailq$