-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Selected source [[:xdigit:]:.]+$
-
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: chronyd exiting$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: chronyd version [[:digit:]]+\.[[:digit:]]+ starting \(\+CMDMON \+NTP \+REFCLOCK \+RTC \+PRIVDROP \+SCFILTER \+SIGND \+ASYNCDNS \+NTS \+SECHASH \+IPV6 -DEBUG\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Frequency -?[[:digit:].]+ \+/- [[:digit:].]+ ppm read from /var/lib/chrony/chrony\.drift$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Loaded seccomp filter \(level 1\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Selected source [[:xdigit:]:.]+( \([[:alnum:].:]+\))?$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Source [[:xdigit:]:.]+ (online|offline)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Source [[:xdigit:]:.]+ replaced with [[:xdigit:]:.]+ \([[:alnum:]._-]+\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: System clock TAI offset set to [[:digit:]]+ seconds$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Using right/UTC timezone to obtain leap second data$