^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: chronyd exiting$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: chronyd version [[:digit:]]+\.[[:digit:]]+ starting \(\+CMDMON \+NTP \+REFCLOCK \+RTC \+PRIVDROP \+SCFILTER \+SIGND \+ASYNCDNS \+NTS \+SECHASH \+IPV6 -DEBUG\)$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Frequency -[[:digit:].]+ \+/- [[:digit:].]+ ppm read from /var/lib/chrony/chrony\.drift$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Frequency -?[[:digit:].]+ \+/- [[:digit:].]+ ppm read from /var/lib/chrony/chrony\.drift$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Loaded seccomp filter \(level 1\)$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Selected source [[:xdigit:]:.]+( \([[:alnum:].:]+\))?$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Source [[:xdigit:]:.]+ (online|offline)$