update rules

diff --git a/files/etc/logcheck/ignore.d.server/local-auditd b/files/etc/logcheck/ignore.d.server/local-auditd
index e872a32fbbc34bc169cf25e0788755cd362d04dd..87668335d61a6595e266bb2b500f4e7d65098bad 100644 (file)
--- a/files/etc/logcheck/ignore.d.server/local-auditd
+++ b/files/etc/logcheck/ignore.d.server/local-auditd
@@ -5,7 +5,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: backlog_wait_time_actual 0$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: enabled 1$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: failure 1$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: Init complete, auditd 3.0 listening for events \(startup state enable\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: Init complete, auditd [[:digit:].]+ listening for events \(startup state enable\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: lost 0$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: No plugins found, not dispatching events$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: No rules$

diff --git a/files/etc/logcheck/ignore.d.server/local-kernel b/files/etc/logcheck/ignore.d.server/local-kernel
index d47590b6ece4d000ef0f9ca81601fd36285145cd..b6482ab8d20183caaa7f723a44d032bdd3a37bfc 100644 (file)
--- a/files/etc/logcheck/ignore.d.server/local-kernel
+++ b/files/etc/logcheck/ignore.d.server/local-kernel
@@ -1,32 +1,13 @@
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] USB Video Class driver \(1\.1\.1\)$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] lp: driver loaded but no devices found$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i2c /dev entries driver$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Asymmetric key parser 'pkcs8' registered$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] loop: module loaded$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): mounted filesystem with ordered data mode\. Opts: acl$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): re-mounted\. Opts: acl,errors=remount-ro$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: Core ver 2\.22$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: HCI device and connection manager initialized$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: HCI socket layer initialized$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: L2CAP socket layer initialized$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: SCO socket layer initialized$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM: chip id 63$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM: features 0x07$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM20702A$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM20702A1 \(001\.002\.014\) build 0000$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP \(Ethernet Emulation\) ver 1\.3$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP filters: protocol multicast$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP socket layer initialized$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Initializing XFRM netlink socket
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] 00:0[[:digit:]]: ttyS[[:digit:]] at I/O 0x[[:digit:]]f8 \(irq = [[:digit:]], base_baud = 115200\) is a 16550A$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] 8021q: 802.1Q VLAN Support v1.8$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] 8021q: adding VLAN 0 to HW filter on device [[:alnum:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Added _OSI.*$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: (APIC|DBG2|DBGP|DMAR|DSDT|FACP|FACS|FIDT|FPDT|HEST|HPET|IVRS|LPIT|MCFG|OEMB|RSDP|RSDT|SSDT|TPM2|UEFI|XSDT)( 0x[[:xdigit:]]+ [[:xdigit:]]+( \(v[[:digit:]]+ .*\))?)?$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: TCPA 0x[[:xdigit:]]+ 000032 \(v02 COREv4 COREBOOT 00000000 CORE 20200110\)
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: bus type PCI registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: bus type USB registered$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Power Button \[PWRB\]$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Power Button \[PWRF\]$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Sleep Button \[SLPB\]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Core revision [[:digit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi_cpufreq: overriding BIOS provided _PSD data$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: [[:digit:]] ACPI AML tables successfully acquired and loaded$
@@ -46,26 +27,31 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Local APIC address 0x[[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Low-level resume complete$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI Interrupt Link \[(INT|LNK)[[:alpha:]]\] \(IRQs [[:digit:][:space:]*]+\)( [[:digit:]*]+)?(, disabled\.)?$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI: Interrupt link (LNKA|LNKB|LNKC|LNKD|LNKS) configured for IRQ [[:digit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI Root Bridge \[PCI0\] \(domain 0000 \[bus 00-[[:xdigit:]]+\]\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpiphp: Slot \[[[:digit:]]+\] registered$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( PM:)? \(supports( S[[:digit:]])+\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PM-Timer IO Port: 0x[[:xdigit:]]+V?$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi PNP0A0[[:digit:]]:00: _OSC: OS supports \[ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3\]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi PNP0A0[[:digit:]]:00: _OSC: OS now controls \[PCIeHotplug SHPCHotplug PME AER PCIeCapability LTR\]$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Power Button \[PWRB\]$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Power Button \[PWRF\]$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi PNP0A0[[:digit:]]:00: _OSC: OS supports \[(ExtendedConfig )?ASPM ClockPM Segments MSI HPX-Type3\]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Power Resource \[(FN[[:digit:]]+|PG[[:digit:]]+|WRST|FPWR)\] \((off|on)\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: \\_PR_\.CPU0: _OSC native thermal LVT Acked$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Preparing to enter system sleep state S3$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: \\_PR_\.P[[:digit:]]+: Found 2 idle states$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Reserving (APIC|ASF!|DBG2|DBGP|DMAR|DSDT|FACP|FACS|FIDT|FPDT|HEST|HPET|IVRS|LPIT|MCFG|OEMB|SSDT|TCPA|TPM2|UEFI) table memory at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Sleep Button \[SLPB\]$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: \(supports( S[[:digit:]])+\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Reserving (APIC|ASF!|DBG2|DBGP|DMAR|DSDT|FACP|FACS|FIDT|FPDT|HEST|HPET|IVRS|LPIT|MCFG|OEMB|SRAT|SSDT|TCPA|TPM2|UEFI|WAET) table memory at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: \_SB_\.(LNKC|LNKD): Enabled at IRQ [[:digit:]]+$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: SRAT 0x[[:xdigit:]]+ 000110 \(v01 BOCHS  BXPC     00000001 BXPC 00000001\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: SRAT: Node 0 PXM 0 \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: SRAT: Node 0 PXM 0 \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] hotplug$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: TCPA 0x[[:xdigit:]]+ 000032 \(v02 COREv4 COREBOOT 00000000 CORE 20200110\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Thermal Zone \[TZ[[:digit:]]+\] \([[:digit:]]+ C\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]( ACPI:)? Using ACPI \(MADT\) for SMP configuration information$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Using IOAPIC for interrupt routing$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Video Device \[GFX0\] \(multi-head: yes  rom: no  post: no\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: WAET 0x[[:xdigit:]]+ 000028 \(v01 BOCHS  BXPC     00000001 BXPC 00000001\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Waking up from system sleep state S3$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Adding [[:digit:]]+k swap on [^.]+\.  Priority:-2 extents:1 across:[[:digit:]]+k (SS)?FS$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Adding [[:digit:]]+k swap on [^.]+\.  Priority:-2 extents:1 across:[[:digit:]]+k( (SS)?FS)?$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AES CTR mode by8 optimization enabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AGP: Checking aperture\.\.\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AGP: No AGP bridge found$
@@ -73,7 +59,8 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ahci 0000:00:[[:xdigit:]]+.[[:digit:]]: AHCI 0001.[[:digit:]]+ 32 slots [[:digit:]] ports [[:digit:]] Gbps 0x[[:xdigit:]]+ impl SATA mode$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ahci 0000:00:[[:xdigit:]]+.[[:digit:]]: flags: .*$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ahci 0000:00:[[:xdigit:]]+.[[:digit:]]: version 3.0$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]_]+ 0000:0[[:digit:]]:[[:xdigit:]]{2}\.[[:xdigit:]] [[:alnum:]]+: renamed from [[:alnum:]]+$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] alg: self-tests for CTR-KDF \(hmac\(sha256\)\) passed$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]_]+ (0000:0[[:digit:]]:[[:xdigit:]]{2}\.[[:xdigit:]]|virtio[[:digit:]]) [[:alnum:]]+: renamed from [[:alnum:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]]+: associate with [[:xdigit:]:]+ \(try [[:digit:]]/3\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]]+: authenticate with [[:xdigit:]:]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]]+: authenticate with [[:xdigit:]:]+$
@@ -90,6 +77,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AppArmor: AppArmor Filesystem Enabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AppArmor: AppArmor initialized$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AppArmor: AppArmor sha1 policy hashing enabled$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Asymmetric key parser 'pkcs8' registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Asymmetric key parser 'x509' registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] async_tx: api initialized \(async\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] at24 0-[[:digit:]]+: 256 byte spd EEPROM, read-only$
@@ -103,7 +91,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:].]+: disabling queued TRIM support$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: DUMMY$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:].]+: Enabling discard_zeroes_data$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: PATA max MWDMA2 cmd 0x[[:xdigit:]]+ ctl 0x376 bmdma 0x[[:xdigit:]]+ irq [[:digit:]]+$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: PATA max MWDMA2 cmd 0x[[:xdigit:]]+ ctl 0x[[:xdigit:]]+ bmdma 0x[[:xdigit:]]+ irq [[:digit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: PATA max UDMA/100 cmd 0x[[:xdigit:]]+ ctl 0x3f6 bmdma 0xff00 irq [[:digit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: SATA link down \(SStatus 0 SControl 300\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: SATA link up [[:digit:].]+ Gbps \(SStatus [[:digit:]]+ SControl 300\)$
@@ -118,17 +106,31 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ath: EEPROM regdomain: 0x0$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ath: Regpair used: 0x3a$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ATOM BIOS: ATI$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] audit: initializing netlink subsys \(disabled\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] audit: type=1400 audit\([[:digit:].:]+\): apparmor="STATUS" operation="profile_load" profile="unconfined" .*$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] audit: type=2000 audit\([[:digit:].:]+\): state=initialized audit_enabled=0 res=1$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AVX2 version of gcm_enc/dec engaged.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AVX version of gcm_enc/dec engaged.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] ACPI data$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] ACPI NVS$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] reserved$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] usable$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] type 16$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] usable$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-provided physical RAM map:$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. bit width:              48$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Block layer SCSI generic \(bsg\) driver version 0.4 loaded \(major [[:digit:]]+\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP \(Ethernet Emulation\) ver 1\.3$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP filters: protocol multicast$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP socket layer initialized$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: Core ver 2\.22$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM20702A$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM20702A1 \(001\.002\.014\) build 0000$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM: chip id 63$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM: features 0x07$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: HCI device and connection manager initialized$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: HCI socket layer initialized$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: L2CAP socket layer initialized$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: SCO socket layer initialized$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]     BOOT_IMAGE=/vmlinuz-.*$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Booting paravirtualized kernel on bare hardware$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Booting paravirtualized kernel on KVM$
@@ -139,8 +141,11 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Calibrating delay loop \(skipped\) preset value.. [[:digit:].]+ BogoMIPS \(lpj=[[:digit:]]+\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Calibrating delay loop \(skipped\), value calculated using timer frequency.. [[:digit:].]+ BogoMIPS \(lpj=[[:digit:]]+\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] caller pci_map_rom\+0x[[:xdigit:]]+/0x[[:xdigit:]]+ mapping multiple BARs$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cblist_init_generic: Setting adjustable number of callback queues\.$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cblist_init_generic: Setting shift to 2 and lim to 1\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ccp 0000:00:[[:xdigit:]]+.0: ccp enabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ccp 0000:00:[[:xdigit:]]+.0: [[:digit:]] command queues available$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cdrom: Uniform CD-ROM driver Revision: 3.20$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cfg80211: Loaded X.509 cert .*$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cfg80211: Loading compiled-in X.509 certificates for regulatory database$
@@ -159,7 +164,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Detected use of extended apic ids on hypertransport bus$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[ *[[:digit:]]+\.[[:digit:]]+\])? device [[:alnum:].]+ (entered|left) promiscuous mode$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]   Device   empty$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] device-mapper: ioctl: 4.43.0-ioctl \(2020-10-01\) initialised: dm-devel@redhat.com$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] device-mapper: ioctl: [[:alnum:].-]+ \([[:digit:]-]+\) initialised: dm-devel@redhat.com$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] device-mapper: uevent: version 1.0.3$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] devtmpfs: initialized$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ( #[[:digit:]])+$
@@ -180,9 +185,10 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMAR: RMRR base: 0x[[:xdigit:]]+ end: 0x[[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: LENOVO 2325CT4/2325CT4, BIOS CBET4000 4.12-375-g7729b29a58 05/28/2020$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: MICRO-STAR INTERANTIONAL CO\.,LTD MS-7368/MS-7368, BIOS V1\.5B2 10/31/2007$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: MSI MS-7816/H87-G43 \(MS-7816\), BIOS V2\.14B15 05/20/2019$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: PC Engines apu2/apu2, BIOS v4\.11\.0\.1 12/09/2019$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: QEMU Standard PC \(i440FX + PIIX, 1996\), BIOS 1.16.2-debian-1.16.2-1 04/01/2014$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: System manufacturer System Product Name/P8H67-M PRO, BIOS 9005 09/18/2018$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: MSI MS-7816/H87-G43 \(MS-7816\), BIOS V2\.14B15 05/20/2019$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] done\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\] Connector [[:digit:]]:$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\]     CRT1: INTERNAL_KLDSCP_DAC1$
@@ -208,6 +214,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\]   SVIDEO-1$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\]     TV1: INTERNAL_KLDSCP_DAC1$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\]   VGA-1$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Dynamic Preempt: voluntary$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] e1000e 0000:00:1f\.6 0000:00:1f\.6 \(uninitialized\): registered PHC clock$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] e1000e 0000:00:1f\.6 [[:alnum:]]+: Intel\(R\) PRO/1000 Network Connection$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] e1000e 0000:00:1f\.6 [[:alnum:]]+: MAC: 12, PHY: 12, PBA No: FFFFFF-0FF$
@@ -241,8 +248,23 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ehci-pci 0000:00:[[:xdigit:]]+\.[[:digit:]]: USB 2.0 started, EHCI 1.00$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ehci-pci: EHCI PCI platform driver$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. event mask:             [[:xdigit:]]+$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: HMAC attrs: 0x1$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: Initialising EVM extended attributes:$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.apparmor$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.capability$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.ima$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.selinux$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.SMACK64 \(disabled\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.SMACK64EXEC \(disabled\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.SMACK64MMAP \(disabled\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.SMACK64TRANSMUTE \(disabled\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): mounted filesystem with ordered data mode\. (Opts: (none|acl)|Quota mode: none\.)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): mounted filesystem without journal\. Quota mode: none\.$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): mounting ext2 file system using the ext4 subsystem$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): re-mounted\. (Opts: acl,errors=remount-ro|Quota mode: none\.)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] f71882fg f71882fg.1536: Fan: [[:digit:]] is in duty-cycle mode$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] f71882fg: Found f71882fg chip at 0x600, revision 32$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Fallback order for Node 0: 0$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] fbcon: i915drmfb \(fb0\) is primary device$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Filesystems sync: [[:digit:].]+ seconds$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. fixed-purpose events:   [[:digit:]]$
@@ -259,7 +281,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] FS-Cache: Netfs 'nfs' registered for caching$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ftrace: allocated [[:digit:]]+ pages with [[:digit:]]+ groups$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ftrace: allocating [[:digit:]]+ entries in [[:digit:]]+ pages$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] fuse: init \(API version 7.32\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] fuse: init \(API version 7.[[:digit:]]+\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] futex hash table entries: [[:digit:]]+ \(order: [[:digit:]]+, [[:digit:]]+ bytes, linear\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. generic registers:      [[:digit:]]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]    generic_sse     : [[:digit:]]+ MB/sec$
@@ -271,8 +293,10 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] hpet0: [[:digit:]] comparators, (64|32)-bit [[:digit:].]+ MHz counter$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] hub [[:digit:]]-[[:digit:]]:1.0: [[:digit:]]+ ports detected$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] hub [[:digit:]]-[[:digit:]]:1.0: USB hub found$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] HugeTLB registered [[:digit:]]+.00 [MG]iB page size, pre-allocated 0 pages$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] HugeTLB: [[:digit:]]+ KiB vmemmap can be freed for a [[:digit:]]+\.00 [MG]iB page$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] HugeTLB:? registered [[:digit:]]+.00 [MG]iB page size, pre-allocated 0 pages$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Hypervisor detected: KVM$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i2c /dev entries driver$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i2c i2c-0: [[:digit:]]/4 memory slots populated \(from DMI\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i2c i2c-0: Successfully instantiated SPD at 0x5[[:digit:]]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i801_smbus 0000:00:1f\.[[:digit:]]: enabling device \(0001 -> 0003\)$
@@ -299,8 +323,10 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] igb 0000:0[[:digit:]]:00\.0: Using MSI-X interrupts. 4 rx queue\(s\), 4 tx queue\(s\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] igb: Copyright \(c\) 2007-2014 Intel Corporation\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] igb: Intel\(R\) Gigabit Ethernet Network Driver$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ima: Allocated hash algorithm: sha256$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]     /init$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Initialise system trusted keyrings$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Initializing XFRM netlink socket
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Initmem setup node 0 \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Inode-cache hash table entries: [[:digit:]]+ \(order: [[:digit:]]+, [[:digit:]]+ bytes, linear\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input[[:digit:]]$
@@ -317,8 +343,9 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: PRP0001:00 as /devices/pci0000:00/PRP0001:00/input/input[[:digit:]]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input[[:digit:]]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input[[:digit:]]$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] In-situ OAM \(IOAM\) with IPv6$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Installing knfsd \(copyright \(C\) 1996 okir@monad\.swb\.de\)\.$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] integrity: Platform Keyring initialized$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] integrity: (Platform|Machine) Keyring initialized$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_idle: Local APIC timer is reliable in all C-states$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_idle: MWAIT substates: 0x[[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_idle: v0.5.1 model 0x[[:xdigit:]]+$
@@ -332,6 +359,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_rapl_common: Found RAPL domain uncore$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IOAPIC\[[[:digit:]]\]: apic_id [[:digit:]]+, version [[:digit:]]+, address 0x[[:xdigit:]]+, GSI [[:digit:]]+-[[:digit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] iommu: Default domain type: Translated$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] iommu: DMA domain TLB invalidation policy: lazy mode$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] io scheduler mq-deadline registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IP idents hash table entries: [[:digit:]]+ \(order: [[:digit:]]+, [[:digit:]]+ bytes, linear\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IPI shorthand broadcast: enabled$
@@ -348,26 +376,33 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Kernel/User page tables isolation: enabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type asymmetric registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type blacklist registered$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type encrypted registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type fscrypt-provisioning registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type ._fscrypt registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type .fscrypt registered$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Kprobes globally optimized$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kprobes: kprobe jump-optimization is enabled\. All kprobes are optimized if possible\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-clock: cpu [[:digit:]], msr [[:xdigit:]]+, (primary|secondary) cpu clock$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-clock: Using msrs [[:xdigit:]]+ and [[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-clock: using sched offset of [[:digit:]]+ cycles$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: KVM setup pv remote TLB flush$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: PV spinlocks enabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: setup PV IPIs$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: setup PV sched yield$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: stealtime: cpu [[:digit:]], msr [[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm: Nested Virtualization enabled$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Last level (dTLB|iTLB) entries: 4KB [[:digit:]]+, 2MB [[:digit:]]+, 4MB [[:digit:]]+, 1GB [[:digit:]]+$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] landlock: Up and running\.$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Last level (dTLB|iTLB) entries: 4KB [[:digit:]]+, 2MB [[:digit:]]+, 4MB [[:digit:]]+(, 1GB [[:digit:]]+)?$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] last_pfn = 0x[[:xdigit:]]+ max_arch_pfn = 0x[[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ledtrig-cpu: registered to indicate activity on CPUs$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Linux agpgart interface v0.103$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Linux version .*$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Loaded X.509 cert '.*'$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Loading compiled-in X.509 certificates$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] loop: module loaded$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] lp: driver loaded but no devices found$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] LSM: Security Framework initializing$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] LSM support for eBPF active$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] LVT offset [[:digit:]] assigned for vector 0x[[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. max period:             [[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mce: CPU0: Thermal monitoring enabled \(TM1\)$
@@ -375,9 +410,10 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mc: Linux media interface: v0.10$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] md[[:digit:]]+: detected capacity change from 0 to [[:digit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] md/raid1:md[[:digit:]]+: active with 2 out of 2 mirrors$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MDS: Mitigation: Clear CPU buffers$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mei_me 0000:00:16.0: enabling device \(0000 -> 0002\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] available for PCI devices$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mem auto-init: stack:off, heap alloc:on, heap free:off$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mem auto-init: stack:(off|all\(zero\)), heap alloc:on, heap free:off$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Memory: [[:digit:]]+K/[[:digit:]]+K available \([[:digit:]]+K kernel code, [[:digit:]]+K rwdata, [[:digit:]]+K rodata, [[:digit:]]+K init, [[:digit:]]+K bss, [[:digit:]]+K reserved, 0K cma-reserved\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] microcode: CPU[[:digit:]]: patch_level=0x[[:xdigit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] microcode: microcode updated early to revision 0x[[:xdigit:]]+, date = [[:digit:]-]+$
@@ -388,6 +424,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mousedev: PS/2 mouse device common for all mice$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Movable zone start for each node$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mpls_gso: MPLS GSO support$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MPTCP token hash table entries: 2048 \(order: 3, 49152 bytes, linear\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mtrr: corrected configuration.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MTRR default type: uncachable$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MTRR default type: write-back$
@@ -398,6 +435,12 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NetLabel: Initializing$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NetLabel:  protocols = UNLABELED CIPSOv4 CALIPSO$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NetLabel:  unlabeled traffic allowed by default$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_INET6 protocol family$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_INET protocol family$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_NETLINK/PF_ROUTE protocol family$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_PACKET protocol family$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_UNIX/PF_LOCAL protocol family$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_XDP protocol family$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] nfsd: last server has exited, flushing export cache$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NFSD: starting 90-second grace period \(net [[:xdigit:]]+\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NFSD: Using UMH upcall client tracking operations\.$
@@ -415,6 +458,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]   (Normal|DMA(32)?) zone: [[:digit:]]+ pages used for memmap$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]   Normal   empty$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NR_IRQS: 524544, nr_irqs: [[:digit:]]+, preallocated irqs: [[:digit:]]+$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NUMA: Node 0 \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] + \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] -> \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NX \(Execute Disable\) protection: active$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ohci_hcd: USB 1.1 'Open' Host Controller \(OHCI\) Driver$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ohci-pci 0000:00:13.[[:digit:]]: irq [[:digit:]]+, io mem 0x[[:xdigit:]]+$
@@ -450,7 +494,6 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: Intel PCH root port ACS workaround enabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: legacy IDE quirk: reg 0x[[:xdigit:]]+: \[io  0x[[:xdigit:]]+(-0x[[:xdigit:]]+)?\]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: Limiting direct PCI/PCI transfers$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI host bridge to bus 0000:00$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: PCI bridge to \[bus [[:digit:]-]+\]( \(subtractive decode\))?$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: PIIX3: Enabling Passive Release$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: PME# supported from .*$
@@ -478,6 +521,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pcieport 0000:00:[[:xdigit:]]+\.[[:digit:]]: Intel PCH root port ACS workaround enabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pcieport 0000:00:[[:xdigit:].]+: pciehp: Slot #0 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug\+ Surprise\+ Interlock- NoCompl\+ IbPresDis- LLActRep\+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pcieport 0000:00:[[:xdigit:].]+: PME: Signaling with IRQ [[:digit:]]+$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI host bridge to bus 0000:00$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI Interrupt Link \[LNK[CD]\] enabled at IRQ [[:digit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI: MMCONFIG at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] reserved in ACPI motherboard resources$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI: MMCONFIG at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] reserved in E820$
@@ -560,10 +604,11 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] RAPL PMU: hw unit of domain pp0-core 2\^-14 Joules$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] RAPL PMU: hw unit of domain pp1-gpu 2\^-14 Joules$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=[[:digit:]]$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Hierarchical RCU implementation\.$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Hierarchical SRCU implementation\.$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu:      Max phase no-delay instances is 1000\.$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu:( Preemptible)? Hierarchical (SRCU|RCU) implementation\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu:      RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=[[:digit:]]\.$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: srcu_init: Setting srcu_struct sizes based on contention\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] registered taskstats version 1$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[ *[[:digit:]]+\.[[:digit:]]+\])? Rekeying PTK for STA [[:xdigit:]:]+ but driver can't safely do that\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Reserving Intel graphics memory at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$
@@ -600,6 +645,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] serio: i8042 (KBD|AUX) port at 0x60,0x64 irq [[:digit:]]+$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:[[:digit:]] nr_cpu_ids:[[:digit:]] nr_node_ids:1$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] signal: max sigframe size: 1776$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=[[:digit:]], Nodes=1$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SMBIOS [[:digit:].]+ present\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] smpboot: Allowing [[:digit:]]+ CPUs, 0 hotplug CPUs$
@@ -610,6 +656,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] smpboot: Total of [[:digit:]]+ processors activated \([[:digit:].]+ BogoMIPS\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] smp: Bringing up secondary CPUs \.\.\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] smp: Brought up 1 node, [[:digit:]] CPUs$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] software IO TLB: area num 4\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] software IO TLB: mapped \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] \(64MB\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sp5100_tco: SP5100/SB800 TCO WatchDog Timer Driver$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sp5100-tco sp5100-tco: initialized. heartbeat=60 sec \(nowayout=0\)$
@@ -617,6 +664,7 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sr 4:0:0:0: Attached scsi CD-ROM sr0$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sr 4:0:0:0: \[sr0\] scsi3-mmc drive: 204x/204x writer dvd-ram cd/rw xa/form2 cdda tray$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sr 4:0:0:0: \[sr0\] scsi3-mmc drive: 306x/306x writer dvd-ram cd/rw xa/form2 cdda tray$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SRAT: PXM 0 -> APIC 0x0[[:digit:]] -> Node 0$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SSE version of gcm_enc/dec engaged.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SVM: kvm: Nested Paging disabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SVM: kvm: Nested Paging enabled$
@@ -667,22 +715,23 @@
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] usb usb[[:digit:]]+: Product: OHCI PCI host controller$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] usb usb[[:digit:]]+: Product: xHCI Host Controller$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] usb usb[[:digit:]]+: SerialNumber: [[:xdigit:]:.-]+$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Using ACPI \(MADT\) for SMP configuration information$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] USB Video Class driver \(1\.1\.1\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Using GB pages for direct mapping$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. value mask:             0000ffffffffffff$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. version:                [[:digit:]]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] VFS: Disk quotas dquot_6.6.0$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] VFS: Dquot-cache hash table entries: 512 \(order 0, 4096 bytes\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] vgaarb: loaded$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] virtio_blk virtio1: [vda] 41910272 512-byte logical blocks \(21.5 GB/20.0 GiB\)$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] virtio_blk virtio1: 4/0/0 default/read/poll queues$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] virtio_blk virtio1: \[vda\] 41910272 512-byte logical blocks \(21.5 GB/20.0 GiB\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]   with arguments:$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]   with environment:$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] workingset: timestamp_bits=36 max_order=[[:digit:]]+ bucket_order=0$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Write protecting the kernel read-only data: 22528k$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Write protecting the kernel read-only data: [[:digit:]]+k$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x2apic enabled$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x2apic: IRQ remapping doesn't support X2APIC mode$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86: Booting SMP configuration:$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/cpu: User Mode Instruction Prevention (UMIP) activated$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/cpu: User Mode Instruction Prevention \(UMIP\) activated$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/fpu: Enabled xstate features 0x3, context size is 576 bytes, using 'compacted' format.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'$

diff --git a/files/etc/logcheck/ignore.d.server/local-lvm b/files/etc/logcheck/ignore.d.server/local-lvm
index 735d7ad3084e7d504770bd72c285d968fd251003..6fc52542aa140a30d9ed685c6db461569edfc12f 100644 (file)
--- a/files/etc/logcheck/ignore.d.server/local-lvm
+++ b/files/etc/logcheck/ignore.d.server/local-lvm
@@ -1,3 +1,4 @@
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]: [[:digit:]]+ logical volume\(s\) in volume group "[[:alnum:]-]+" monitored$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]: pvscan\[[[:digit:]]+\] PV [^[:space:]]+ online, VG [[:alnum:]-]+ is complete\.$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]:[[:space:]]+[[:digit:]]+ logical volume\(s\) in volume group "[[:alnum:]-]+" monitored$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]:( pvscan\[[[:digit:]]+\])? PV [^[:space:]]+ online, VG [[:alnum:]-]+ is complete\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]: pvscan\[[[:digit:]]+\] VG [[:alnum:]-]+ skip autoactivation\.$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]: VG [[:alnum:]-]+ finished$

diff --git a/files/etc/logcheck/ignore.d.server/local-rsyslog b/files/etc/logcheck/ignore.d.server/local-rsyslog
index 0a29d5d4add74df8f4c07552f26eeafb11c1b990..951bd9c5319fdf0f9c941e1ae0410710ef3527e0 100644 (file)
--- a/files/etc/logcheck/ignore.d.server/local-rsyslog
+++ b/files/etc/logcheck/ignore.d.server/local-rsyslog
@@ -1 +1,3 @@
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' \(fd 3\) from systemd\.  \[v[[:digit:].]+\]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+\[origin software="rsyslogd" swVersion="[[:digit:].]+" x-pid="[[:digit:]]+" x-info="https://www.rsyslog.com"\] rsyslogd was HUPed$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+\[origin software="rsyslogd" swVersion="[[:digit:].]+" x-pid="[[:digit:]]+" x-info="https://www.rsyslog.com"\] start$

diff --git a/files/etc/logcheck/ignore.d.server/local-systemd b/files/etc/logcheck/ignore.d.server/local-systemd
index 23009efa8a43e1cafcafe9161c0c53014171cc32..f3be76e72c61a8dc413948f151a50cf774befe61 100644 (file)
--- a/files/etc/logcheck/ignore.d.server/local-systemd
+++ b/files/etc/logcheck/ignore.d.server/local-systemd
@@ -1,5 +1,5 @@
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Activated swap [^[:space:]]+$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Activating swap [^[:space:]]+$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Activated swap
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Activating swap
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: [[:alnum:]@-]+\.service: Consumed [[:digit:].]+s CPU time\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: [[:alnum:]-]+\.socket: Succeeded\.$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: [[:alnum:]_-]+\.timer: Succeeded\.$