-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ CRON\[[[:digit:]]+\]: pam_unix\(cron:session\): session opened for user redmine_hnjs\(uid=1001\) by \(uid=0\)$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ CRON\[[[:digit:]]+\]: pam_unix\(cron:session\): session closed for user redmine_hnjs$
-
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ CRON\[[[:digit:]]+\]: pam_unix\(cron:session\): session opened for user redmine_hnjs\(uid=1001\) by \(uid=0\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ CRON\[[[:digit:]]+\]: pam_unix\(cron:session\): session closed for user redmine_hnjs$