Add $ to all non-loose entries. Misc. cleanup.

35 files changed, 381 insertions, 380 deletions

diff --git a/logcheck/ignore.d.server/amavis b/logcheck/ignore.d.server/amavis
index 898e265..1fa7231 100644
--- a/logcheck/ignore.d.server/amavis
+++ b/logcheck/ignore.d.server/amavis
@@ -1,7 +1,7 @@
-amavis\[[0-9]+\]: cached [a-f0-9]+ from <[^[:space:]]*>
-amavis\[[0-9]+\]: infected \([^[:space:]]+\), from=<[^[:space:]]+>, to=<[^[:space:]]+>, quarantine virus-[0-9-]+
-amavis\[[0-9]+\]: local delivery: <[^[:space:]]*> -> <(spam|virus)-quarantine>, mbx=/var/lib/amavis/virusmails/(spam|virus)-[[:alnum:]-]+(\.gz)?
-amavis\[[0-9]+\]: mail checking ended: (DISCARD|REJECT)
-amavis\[[0-9]+\]: spam from=(<[^[:space:]]+>|\(\?\)), to=<[^[:space:]]+>, quarantine spam-[^[:space:]]+
-amavis\[[0-9]+\]: spam_scan: (No|Yes), hits=[\.0-9-]+ tests=[,_A-Z0-9]+ <[^[:space:]]*>
-amavis\[[0-9]+\]: spam_scan: whitelisted sender <[^[:space:]]+>, spam check skipped
+amavis\[[0-9]+\]: cached [a-f0-9]+ from <[^[:space:]]*>$
+amavis\[[0-9]+\]: infected \([^[:space:]]+\), from=<[^[:space:]]+>, to=<[^[:space:]]+>, quarantine virus-[0-9-]+$
+amavis\[[0-9]+\]: local delivery: <[^[:space:]]*> -> <(spam|virus)-quarantine>, mbx=/var/lib/amavis/virusmails/(spam|virus)-[[:alnum:]-]+(\.gz)?$
+amavis\[[0-9]+\]: mail checking ended: (DISCARD|REJECT)$
+amavis\[[0-9]+\]: spam from=(<[^[:space:]]+>|\(\?\)), to=<[^[:space:]]+>, quarantine spam-[^[:space:]]+$
+amavis\[[0-9]+\]: spam_scan: (No|Yes), hits=[\.0-9-]+ tests=[,_A-Z0-9]+ <[^[:space:]]*>$
+amavis\[[0-9]+\]: spam_scan: whitelisted sender <[^[:space:]]+>, spam check skipped$
diff --git a/logcheck/ignore.d.server/anacron b/logcheck/ignore.d.server/anacron
index 72bbf05..8ff87a9 100644
--- a/logcheck/ignore.d.server/anacron
+++ b/logcheck/ignore.d.server/anacron
@@ -1,7 +1,7 @@
-anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' terminated( \(exit status: 1\))?( \(mailing output\))?
-anacron\[[0-9]+\]: Normal exit
-anacron\[[0-9]+\]: Anacron 2.3 started on [0-9-]+
-anacron\[[0-9]+\]: Will run job `cron.(daily|weekly|monthly)' in (5|10|15) min\.
-anacron\[[0-9]+\]: Jobs will be executed sequentially
-anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' started
-anacron\[[0-9]+\]: Updated timestamp for job `cron.(daily|weekly|monthly)' to [0-9-]+
+anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' terminated( \(exit status: 1\))?( \(mailing output\))?$
+anacron\[[0-9]+\]: Normal exit$
+anacron\[[0-9]+\]: Anacron 2.3 started on [0-9-]+$
+anacron\[[0-9]+\]: Will run job `cron.(daily|weekly|monthly)' in (5|10|15) min\.$
+anacron\[[0-9]+\]: Jobs will be executed sequentially$
+anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' started$
+anacron\[[0-9]+\]: Updated timestamp for job `cron.(daily|weekly|monthly)' to [0-9-]+$
diff --git a/logcheck/ignore.d.server/bind.tmp b/logcheck/ignore.d.server/bind.tmp
index 4e9cde9..ba68c79 100644
--- a/logcheck/ignore.d.server/bind.tmp
+++ b/logcheck/ignore.d.server/bind.tmp
@@ -1,2 +1,2 @@
-named\[[0-9]+\]: zone .*: refresh: failure trying master .*: timed out
-named\[[0-9]+\]: client [\.0-9]+#[0-9]+: update forwarding denied
+named\[[0-9]+\]: zone .*: refresh: failure trying master .*: timed out$
+named\[[0-9]+\]: client [\.0-9]+#[0-9]+: update forwarding denied$
diff --git a/logcheck/ignore.d.server/dancer-ircd b/logcheck/ignore.d.server/dancer-ircd
index 97a3614..8c0475a 100644
--- a/logcheck/ignore.d.server/dancer-ircd
+++ b/logcheck/ignore.d.server/dancer-ircd
@@ -1,3 +1,3 @@
-ircd\[[0-9]+\]: ircd exiting: autodie
-ircd\[[0-9]+\]: Server Ready
-(ircd\[[0-9]+\]: )?binding stream socket [\.[:alnum:]]+\[\*\.666[789]\]: Address already in use
+ircd\[[0-9]+\]: ircd exiting: autodie$
+ircd\[[0-9]+\]: Server Ready$
+(ircd\[[0-9]+\]: )?binding stream socket [\.[:alnum:]]+\[\*\.666[789]\]: Address already in use$
diff --git a/logcheck/ignore.d.server/dhcp-client b/logcheck/ignore.d.server/dhcp-client
index a301f35..fa306e6 100644
--- a/logcheck/ignore.d.server/dhcp-client
+++ b/logcheck/ignore.d.server/dhcp-client
@@ -1,5 +1,5 @@
 # NB: dhcp 2-x entries are in dhcp
-dhclient(-2.2.x)?: DHCP(REQUEST|DISCOVER) on .* to .* port 67( interval [0-9]+)?
-dhclient(-2.2.x)?: DHCP(ACK|OFFER) from [\.0-9]+
-dhclient(-2.2.x)?: bound to .* -- renewal in [0-9]+ seconds\.
-dhclient(-2.2.x)?: irda0: unknown hardware address type 783
+dhclient(-2.2.x)?: DHCP(REQUEST|DISCOVER) on .* to .* port 67( interval [0-9]+)?$
+dhclient(-2.2.x)?: DHCP(ACK|OFFER) from [\.0-9]+$
+dhclient(-2.2.x)?: bound to .* -- renewal in [0-9]+ seconds\.$
+dhclient(-2.2.x)?: irda0: unknown hardware address type 783$
diff --git a/logcheck/ignore.d.server/dhcp.changes b/logcheck/ignore.d.server/dhcp.changes
index f545616..41dd58b 100644
--- a/logcheck/ignore.d.server/dhcp.changes
+++ b/logcheck/ignore.d.server/dhcp.changes
@@ -1,10 +1,10 @@
 # NB: dhcp3 entries are in dhcp3-common
-dhcpd-2.2.x: Abandoning IP address [\.0-9]+: (declined\.|pinged before offer)
-dhcpd-2.2.x: BOOTREPLY for [\.0-9]+ to [^[:space:]]+ ([0-9a-f:]+) via eth[0-9]+
-dhcpd-2.2.x: BOOTREQUEST from [0-9a-f:]+
-dhcpd-2.2.x: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+ via eth[0-9]+
-dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+
-dhcpd-2.2.x: DHCPINFORM from [\.0-9]+
-dhcpd-2.2.x: DHCPDECLINE on [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+
-dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+ \((not )?found\)
-dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+
+dhcpd-2.2.x: Abandoning IP address [\.0-9]+: (declined\.|pinged before offer)$
+dhcpd-2.2.x: BOOTREPLY for [\.0-9]+ to [^[:space:]]+ ([0-9a-f:]+) via eth[0-9]+$
+dhcpd-2.2.x: BOOTREQUEST from [0-9a-f:]+$
+dhcpd-2.2.x: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+ via eth[0-9]+$
+dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+$
+dhcpd-2.2.x: DHCPINFORM from [\.0-9]+$
+dhcpd-2.2.x: DHCPDECLINE on [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+$
+dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+ \((not )?found\)$
+dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+$
diff --git a/logcheck/ignore.d.server/dhcp3-common b/logcheck/ignore.d.server/dhcp3-common
index 8af4c5a..cac905b 100644
--- a/logcheck/ignore.d.server/dhcp3-common
+++ b/logcheck/ignore.d.server/dhcp3-common
@@ -1,12 +1,12 @@
-dhcpd: Abandoning IP address [\.0-9]+: pinged before offer
-dhcpd: BOOTREQUEST from [0-9a-f:]+
-dhcpd: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+
-dhcpd: DHCPACK to [\.0-9]+
-dhcpd: DHCPDISCOVER from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+
-dhcpd: DHCPINFORM from [\.0-9]+
-dhcpd: DHCPRELEASE of [\.0-9]+
-dhcpd: DHCPREQUEST for [\.0-9]+( \([\.0-9]+\))? from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+
-dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.
-dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.
-dhcpd: accepting packet with data after udp payload.
-dhcpd: ip length 576 disagrees with bytes received 590.
+dhcpd: Abandoning IP address [\.0-9]+: pinged before offer$
+dhcpd: BOOTREQUEST from [0-9a-f:]+$
+dhcpd: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$
+dhcpd: DHCPACK to [\.0-9]+$
+dhcpd: DHCPDISCOVER from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$
+dhcpd: DHCPINFORM from [\.0-9]+$
+dhcpd: DHCPRELEASE of [\.0-9]+$
+dhcpd: DHCPREQUEST for [\.0-9]+( \([\.0-9]+\))? from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$
+dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.$
+dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.$
+dhcpd: accepting packet with data after udp payload.$
+dhcpd: ip length 576 disagrees with bytes received 590.$
diff --git a/logcheck/ignore.d.server/gdm b/logcheck/ignore.d.server/gdm
deleted file mode 100644
index af52a72..0000000
--- a/logcheck/ignore.d.server/gdm
+++ /dev/null
@@ -1 +0,0 @@
-gdm\[[0-9]+\]: run_pictures: .*/.gnome/gdm .*\.
diff --git a/logcheck/ignore.d.server/gdm.da_DK b/logcheck/ignore.d.server/gdm.da_DK
index dcde91e..824cb23 100644
--- a/logcheck/ignore.d.server/gdm.da_DK
+++ b/logcheck/ignore.d.server/gdm.da_DK
@@ -1,3 +1,2 @@
 gdm\[[0-9]+\]: Pingning af.* mislykkedes, deaktiver terminal!
-gdm\[[0-9]+\]: gdm_slave_xioerror_handler: Fatal X-fejl - genstarter.*
-
+gdm\[[0-9]+\]: \(child [0-9]+\) gdm_slave_xioerror_handler: Fatal X-fejl - genstarter [0-9:\.]*$
diff --git a/logcheck/ignore.d.server/hotplug b/logcheck/ignore.d.server/hotplug
index 2728667..e0a5637 100644
--- a/logcheck/ignore.d.server/hotplug
+++ b/logcheck/ignore.d.server/hotplug
@@ -1,2 +1,2 @@
-/etc/hotplug/net.agent: invoke if(up|down) ppp[0-9]
-/etc/hotplug/net.agent: assuming ppp[0-9] is already up
+/etc/hotplug/net.agent: invoke if(up|down) ppp[0-9]$
+/etc/hotplug/net.agent: assuming ppp[0-9] is already up$
diff --git a/logcheck/ignore.d.server/hylafax-server b/logcheck/ignore.d.server/hylafax-server
index 2bd46bd..f6fedfb 100644
--- a/logcheck/ignore.d.server/hylafax-server
+++ b/logcheck/ignore.d.server/hylafax-server
@@ -1,10 +1,10 @@
-Fax(Getty|Send)\[[0-9]+\]: STATE CHANGE:( ->| BASE| LOCKWAIT| LISTENING| RUNNING| ANSWERING| RECEIVING| MODEMWAIT)+
-Fax(Getty|Send)\[[0-9]+\]: MODEM (ROCKWELL|ZYXEL) .*
-FaxGetty\[[0-9]+\]: RECV FAX \([0-9]+\): from .*, page .* in [0-9]+:[0-9]+, INF, .* line/mm, (1|2)-D MR(, [0-9]+ bit/s)?
-FaxGetty\[[0-9]+\]: RECV FAX \([0-9]+\): recvq/fax[0-9]+\.tif from .*, route to .*, [0-9]+ pages in [0-9]+:[0-9]+
-FaxGetty\[[0-9]+\]: RECV FAX: bin/faxrcvd "recvq/fax[0-9]+\.tif" "ttyS[012]" "[0-9]+" ""
-FaxGetty\[[0-9]+\]: ANSWER: Ring detected without successful handshake
-FaxGetty\[[0-9]+\]: ANSWER: FAX CONNECTION
-FaxQueuer\[[0-9]+\]: SUBMIT JOB [0-9]+
-FaxSend\[[0-9]+\]: SEND FAX: JOB [0-9]+ DEST [0-9]+ COMMID [0-9]+
-HylaFAX\[[0-9]+\]: Filesystem has SysV-style file creation semantics.
+Fax(Getty|Send)\[[0-9]+\]: STATE CHANGE:( ->| BASE| LOCKWAIT| LISTENING| RUNNING| ANSWERING| RECEIVING| MODEMWAIT)+$
+Fax(Getty|Send)\[[0-9]+\]: MODEM (ROCKWELL|ZYXEL) .*$
+FaxGetty\[[0-9]+\]: RECV FAX \([0-9]+\): from .*, page .* in [0-9]+:[0-9]+, INF, .* line/mm, (1|2)-D MR(, [0-9]+ bit/s)?$
+FaxGetty\[[0-9]+\]: RECV FAX \([0-9]+\): recvq/fax[0-9]+\.tif from .*, route to .*, [0-9]+ pages in [0-9]+:[0-9]+$
+FaxGetty\[[0-9]+\]: RECV FAX: bin/faxrcvd "recvq/fax[0-9]+\.tif" "ttyS[012]" "[0-9]+" ""$
+FaxGetty\[[0-9]+\]: ANSWER: Ring detected without successful handshake$
+FaxGetty\[[0-9]+\]: ANSWER: FAX CONNECTION$
+FaxQueuer\[[0-9]+\]: SUBMIT JOB [0-9]+$
+FaxSend\[[0-9]+\]: SEND FAX: JOB [0-9]+ DEST [0-9]+ COMMID [0-9]+$
+HylaFAX\[[0-9]+\]: Filesystem has SysV-style file creation semantics.$
diff --git a/logcheck/ignore.d.server/libgpmg1 b/logcheck/ignore.d.server/libgpmg1
index 52650d1..b7450d7 100644
--- a/logcheck/ignore.d.server/libgpmg1
+++ b/logcheck/ignore.d.server/libgpmg1
@@ -1 +1 @@
-[[:alnum:]]: /dev/gpmctl: No such file or directory
+[[:alnum:]]+: /dev/gpmctl: No such file or directory$
diff --git a/logcheck/ignore.d.server/libpam-modules b/logcheck/ignore.d.server/libpam-modules
index 2c3220b..89f4972 100644
--- a/logcheck/ignore.d.server/libpam-modules
+++ b/logcheck/ignore.d.server/libpam-modules
@@ -1 +1 @@
-pam_limits\[[0-9]+\]: default limits skipped for 'root'
+pam_limits\[[0-9]+\]: default limits skipped for 'root'$
diff --git a/logcheck/ignore.d.server/local b/logcheck/ignore.d.server/local
index ddcb44a..ea7c13d 100644
--- a/logcheck/ignore.d.server/local
+++ b/logcheck/ignore.d.server/local
@@ -1,21 +1,21 @@
 ### ignore.d.server/amanda
 amandad\[[0-9]+\]: connect from
 ### ignore.d.server/amavis
-amavis\[[0-9]+\]: cached [a-f0-9]+ from <[^[:space:]]*>
-amavis\[[0-9]+\]: infected \([^[:space:]]+\), from=<[^[:space:]]+>, to=<[^[:space:]]+>, quarantine virus-[0-9-]+
-amavis\[[0-9]+\]: local delivery: <[^[:space:]]*> -> <(spam|virus)-quarantine>, mbx=/var/lib/amavis/virusmails/(spam|virus)-[[:alnum:]-]+(\.gz)?
-amavis\[[0-9]+\]: mail checking ended: (DISCARD|REJECT)
-amavis\[[0-9]+\]: spam from=(<[^[:space:]]+>|\(\?\)), to=<[^[:space:]]+>, quarantine spam-[^[:space:]]+
-amavis\[[0-9]+\]: spam_scan: (No|Yes), hits=[\.0-9-]+ tests=[,_A-Z0-9]+ <[^[:space:]]*>
-amavis\[[0-9]+\]: spam_scan: whitelisted sender <[^[:space:]]+>, spam check skipped
+amavis\[[0-9]+\]: cached [a-f0-9]+ from <[^[:space:]]*>$
+amavis\[[0-9]+\]: infected \([^[:space:]]+\), from=<[^[:space:]]+>, to=<[^[:space:]]+>, quarantine virus-[0-9-]+$
+amavis\[[0-9]+\]: local delivery: <[^[:space:]]*> -> <(spam|virus)-quarantine>, mbx=/var/lib/amavis/virusmails/(spam|virus)-[[:alnum:]-]+(\.gz)?$
+amavis\[[0-9]+\]: mail checking ended: (DISCARD|REJECT)$
+amavis\[[0-9]+\]: spam from=(<[^[:space:]]+>|\(\?\)), to=<[^[:space:]]+>, quarantine spam-[^[:space:]]+$
+amavis\[[0-9]+\]: spam_scan: (No|Yes), hits=[\.0-9-]+ tests=[,_A-Z0-9]+ <[^[:space:]]*>$
+amavis\[[0-9]+\]: spam_scan: whitelisted sender <[^[:space:]]+>, spam check skipped$
 ### ignore.d.server/anacron
-anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' terminated( \(exit status: 1\))?( \(mailing output\))?
-anacron\[[0-9]+\]: Normal exit
-anacron\[[0-9]+\]: Anacron 2.3 started on [0-9-]+
-anacron\[[0-9]+\]: Will run job `cron.(daily|weekly|monthly)' in (5|10|15) min\.
-anacron\[[0-9]+\]: Jobs will be executed sequentially
-anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' started
-anacron\[[0-9]+\]: Updated timestamp for job `cron.(daily|weekly|monthly)' to [0-9-]+
+anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' terminated( \(exit status: 1\))?( \(mailing output\))?$
+anacron\[[0-9]+\]: Normal exit$
+anacron\[[0-9]+\]: Anacron 2.3 started on [0-9-]+$
+anacron\[[0-9]+\]: Will run job `cron.(daily|weekly|monthly)' in (5|10|15) min\.$
+anacron\[[0-9]+\]: Jobs will be executed sequentially$
+anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' started$
+anacron\[[0-9]+\]: Updated timestamp for job `cron.(daily|weekly|monthly)' to [0-9-]+$
 ### ignore.d.server/bind.changes
 named\[[0-9]+\]: Lame delegation
 named\[[0-9]+\]: Lame server on '[^[:space:]]+' \(in '[^[:space:]]+'\?\): \[[\.0-9]+\]\.[0-9]+ '[^[:space:]]+'$
@@ -41,8 +41,8 @@ named\[[0-9]+\]: rcvd NOTIFY\([^[:space:]]+, IN, SOA\) from \[[\.0-9]+\]\.[0-9]+
 named\[[0-9]+\]: late CNAME in answer section for [^[:space:]]+$
 named\[[0-9]+\]: unrelated additional info '[^[:space:]]+' type A from \[[\.0-9]+\]\.[0-9]+$
 ### ignore.d.server/bind.tmp
-named\[[0-9]+\]: zone .*: refresh: failure trying master .*: timed out
-named\[[0-9]+\]: client [\.0-9]+#[0-9]+: update forwarding denied
+named\[[0-9]+\]: zone .*: refresh: failure trying master .*: timed out$
+named\[[0-9]+\]: client [\.0-9]+#[0-9]+: update forwarding denied$
 ### ignore.d.server/courier
 courierpop3login: Connection, ip=\[::ffff:.*\]
 courierpop3login: LOGIN, user=.*, ip=\[::ffff:.*\]
@@ -62,71 +62,70 @@ imapd-ssl: Connection, ip=\[::ffff:.*\]
 imapd-ssl: LOGIN, user=.*, ip=\[::ffff:.*\]
 imapd-ssl: DISCONNECTED, user=.*, ip=\[::ffff:.*\]
 ### ignore.d.server/dancer-ircd
-ircd\[[0-9]+\]: ircd exiting: autodie
-ircd\[[0-9]+\]: Server Ready
-(ircd\[[0-9]+\]: )?binding stream socket [\.[:alnum:]]+\[\*\.666[789]\]: Address already in use
+ircd\[[0-9]+\]: ircd exiting: autodie$
+ircd\[[0-9]+\]: Server Ready$
+(ircd\[[0-9]+\]: )?binding stream socket [\.[:alnum:]]+\[\*\.666[789]\]: Address already in use$
 ### ignore.d.server/dhcp-client
 # NB: dhcp 2-x entries are in dhcp
-dhclient(-2.2.x)?: DHCP(REQUEST|DISCOVER) on .* to .* port 67( interval [0-9]+)?
-dhclient(-2.2.x)?: DHCP(ACK|OFFER) from [\.0-9]+
-dhclient(-2.2.x)?: bound to .* -- renewal in [0-9]+ seconds\.
-dhclient(-2.2.x)?: irda0: unknown hardware address type 783
+dhclient(-2.2.x)?: DHCP(REQUEST|DISCOVER) on .* to .* port 67( interval [0-9]+)?$
+dhclient(-2.2.x)?: DHCP(ACK|OFFER) from [\.0-9]+$
+dhclient(-2.2.x)?: bound to .* -- renewal in [0-9]+ seconds\.$
+dhclient(-2.2.x)?: irda0: unknown hardware address type 783$
 ### ignore.d.server/dhcp.changes
 # NB: dhcp3 entries are in dhcp3-common
-dhcpd-2.2.x: Abandoning IP address [\.0-9]+: (declined\.|pinged before offer)
-dhcpd-2.2.x: BOOTREPLY for [\.0-9]+ to [^[:space:]]+ ([0-9a-f:]+) via eth[0-9]+
-dhcpd-2.2.x: BOOTREQUEST from [0-9a-f:]+
-dhcpd-2.2.x: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+ via eth[0-9]+
-dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+
-dhcpd-2.2.x: DHCPINFORM from [\.0-9]+
-dhcpd-2.2.x: DHCPDECLINE on [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+
-dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+ \((not )?found\)
-dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+
+dhcpd-2.2.x: Abandoning IP address [\.0-9]+: (declined\.|pinged before offer)$
+dhcpd-2.2.x: BOOTREPLY for [\.0-9]+ to [^[:space:]]+ ([0-9a-f:]+) via eth[0-9]+$
+dhcpd-2.2.x: BOOTREQUEST from [0-9a-f:]+$
+dhcpd-2.2.x: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+ via eth[0-9]+$
+dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+$
+dhcpd-2.2.x: DHCPINFORM from [\.0-9]+$
+dhcpd-2.2.x: DHCPDECLINE on [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+$
+dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+ \((not )?found\)$
+dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+$
 ### ignore.d.server/dhcp3-common
-dhcpd: Abandoning IP address [\.0-9]+: pinged before offer
-dhcpd: BOOTREQUEST from [0-9a-f:]+
-dhcpd: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+
-dhcpd: DHCPACK to [\.0-9]+
-dhcpd: DHCPDISCOVER from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+
-dhcpd: DHCPINFORM from [\.0-9]+
-dhcpd: DHCPRELEASE of [\.0-9]+
-dhcpd: DHCPREQUEST for [\.0-9]+( \([\.0-9]+\))? from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+
-dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.
-dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.
-dhcpd: accepting packet with data after udp payload.
-dhcpd: ip length 576 disagrees with bytes received 590.
+dhcpd: Abandoning IP address [\.0-9]+: pinged before offer$
+dhcpd: BOOTREQUEST from [0-9a-f:]+$
+dhcpd: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$
+dhcpd: DHCPACK to [\.0-9]+$
+dhcpd: DHCPDISCOVER from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$
+dhcpd: DHCPINFORM from [\.0-9]+$
+dhcpd: DHCPRELEASE of [\.0-9]+$
+dhcpd: DHCPREQUEST for [\.0-9]+( \([\.0-9]+\))? from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$
+dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.$
+dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.$
+dhcpd: accepting packet with data after udp payload.$
+dhcpd: ip length 576 disagrees with bytes received 590.$
 ### ignore.d.server/gdm
-gdm\[[0-9]+\]: run_pictures: .*/.gnome/gdm .*\.
+gdm\[[0-9]+\]: run_pictures: Directory [^[:space:]] does not exist\.$
 ### ignore.d.server/gdm.da_DK
 gdm\[[0-9]+\]: Pingning af.* mislykkedes, deaktiver terminal!
-gdm\[[0-9]+\]: gdm_slave_xioerror_handler: Fatal X-fejl - genstarter.*
-
+gdm\[[0-9]+\]: \(child [0-9]+\) gdm_slave_xioerror_handler: Fatal X-fejl - genstarter [0-9:\.]*$
 ### ignore.d.server/hotplug
-/etc/hotplug/net.agent: invoke if(up|down) ppp[0-9]
-/etc/hotplug/net.agent: assuming ppp[0-9] is already up
+/etc/hotplug/net.agent: invoke if(up|down) ppp[0-9]$
+/etc/hotplug/net.agent: assuming ppp[0-9] is already up$
 ### ignore.d.server/hylafax-server
-Fax(Getty|Send)\[[0-9]+\]: STATE CHANGE:( ->| BASE| LOCKWAIT| LISTENING| RUNNING| ANSWERING| RECEIVING| MODEMWAIT)+
-Fax(Getty|Send)\[[0-9]+\]: MODEM (ROCKWELL|ZYXEL) .*
-FaxGetty\[[0-9]+\]: RECV FAX \([0-9]+\): from .*, page .* in [0-9]+:[0-9]+, INF, .* line/mm, (1|2)-D MR(, [0-9]+ bit/s)?
-FaxGetty\[[0-9]+\]: RECV FAX \([0-9]+\): recvq/fax[0-9]+\.tif from .*, route to .*, [0-9]+ pages in [0-9]+:[0-9]+
-FaxGetty\[[0-9]+\]: RECV FAX: bin/faxrcvd "recvq/fax[0-9]+\.tif" "ttyS[012]" "[0-9]+" ""
-FaxGetty\[[0-9]+\]: ANSWER: Ring detected without successful handshake
-FaxGetty\[[0-9]+\]: ANSWER: FAX CONNECTION
-FaxQueuer\[[0-9]+\]: SUBMIT JOB [0-9]+
-FaxSend\[[0-9]+\]: SEND FAX: JOB [0-9]+ DEST [0-9]+ COMMID [0-9]+
-HylaFAX\[[0-9]+\]: Filesystem has SysV-style file creation semantics.
+Fax(Getty|Send)\[[0-9]+\]: STATE CHANGE:( ->| BASE| LOCKWAIT| LISTENING| RUNNING| ANSWERING| RECEIVING| MODEMWAIT)+$
+Fax(Getty|Send)\[[0-9]+\]: MODEM (ROCKWELL|ZYXEL) .*$
+FaxGetty\[[0-9]+\]: RECV FAX \([0-9]+\): from .*, page .* in [0-9]+:[0-9]+, INF, .* line/mm, (1|2)-D MR(, [0-9]+ bit/s)?$
+FaxGetty\[[0-9]+\]: RECV FAX \([0-9]+\): recvq/fax[0-9]+\.tif from .*, route to .*, [0-9]+ pages in [0-9]+:[0-9]+$
+FaxGetty\[[0-9]+\]: RECV FAX: bin/faxrcvd "recvq/fax[0-9]+\.tif" "ttyS[012]" "[0-9]+" ""$
+FaxGetty\[[0-9]+\]: ANSWER: Ring detected without successful handshake$
+FaxGetty\[[0-9]+\]: ANSWER: FAX CONNECTION$
+FaxQueuer\[[0-9]+\]: SUBMIT JOB [0-9]+$
+FaxSend\[[0-9]+\]: SEND FAX: JOB [0-9]+ DEST [0-9]+ COMMID [0-9]+$
+HylaFAX\[[0-9]+\]: Filesystem has SysV-style file creation semantics.$
 ### ignore.d.server/imp
 IMP\[[0-9]+\]: Login .* to .*:143 as .*
 ### ignore.d.server/libgpmg1
-[[:alnum:]]: /dev/gpmctl: No such file or directory
+[[:alnum:]]+: /dev/gpmctl: No such file or directory$
 ### ignore.d.server/libpam-modules
-pam_limits\[[0-9]+\]: default limits skipped for 'root'
+pam_limits\[[0-9]+\]: default limits skipped for 'root'$
 ### ignore.d.server/mailutils-imap4d
-gnu-imap4d\[[0-9]+\]: Incoming connection opened
-gnu-imap4d\[[0-9]+\]: connect from [\.0-9]+
-gnu-imap4d\[[0-9]+\]: User '[[:alnum:]]+' logged in
-gnu-imap4d\[[0-9]+\]: Session timed out for user: [[:alnum:]]+
-gnu-imap4d\[[0-9]+\]: got signal Alarm clock
+gnu-imap4d\[[0-9]+\]: Incoming connection opened$
+gnu-imap4d\[[0-9]+\]: connect from [\.0-9]+$
+gnu-imap4d\[[0-9]+\]: User '[[:alnum:]]+' logged in$
+gnu-imap4d\[[0-9]+\]: Session timed out for user: [[:alnum:]]+$
+gnu-imap4d\[[0-9]+\]: got signal Alarm clock$
 ### ignore.d.server/misc
 # Figure out if these belong to dhcp or dhcp3-common (or dhclient?)
 dhcpd.*: Reclaiming( REQUESTed) abandoned IP address [\.0-9]+
@@ -134,130 +133,130 @@ dhcpd.*: already acking lease
 dhcpd.*: send_packet: Connection refused
 dhcpd.*: fallback_discard: Connection refused
 # These show up when isdnutils is installed, but isn't strictly related to those packages
-kernel: isdn_net: call from [,0-9]+ -> [0-9]+
-kernel: isdn_net: Service-Indicator not [0-9], ignored
+kernel: isdn_net: call from [,0-9]+ -> [0-9]+$
+kernel: isdn_net: Service-Indicator not [0-9], ignored$
 # This one shows up with firewalls blocking SMB ports non-silently
 kernel: Packet log: input DENY eth[0-9]+ PROTO=17 .*:(137|138) .*:(137|138) L=[0-9]+ S=0x00 I=[0-9]+ F=0x0000 T=[0-9]+ \(#[0-9]+\)
 ### ignore.d.server/murasaki
-murasaki\.usb\[[0-9]+\]: found depended module="[[:alnum:]]+"
-murasaki\.(usb|net)\[[0-9]+\]: try expanding "\[net\]"
-murasaki\.(usb|net)\[[0-9]+\]: dependent\(net\) is found
-murasaki\.(usb|net)\[[0-9]+\]: net device is (added|removed|(un)?register(e)?d)
-murasaki\.(usb|net)\[[0-9]+\]: Execuing "net" "(stop|start)"
-murasaki\.(usb|net)\[[0-9]+\]: execute if(up|down) (eth|(i)?ppp|irda)[0-9]
-murasaki\.usb\[[0-9]+\]: (MATCH\(audio\) -> match_flags:[[:alnum:]]+ )?vendor:[[:alnum:]]+ product:[[:alnum:]]+ Dclass:[[:alnum:]]+ Dsubclass:[[:alnum:]]+ Dprotocol:[[:alnum:]]+ Iclass:[[:alnum:]]+ Isubclass:[[:alnum:]]+ Iprotocol:[[:alnum:]]+
+murasaki\.usb\[[0-9]+\]: found depended module="[[:alnum:]]+"$
+murasaki\.(usb|net)\[[0-9]+\]: try expanding "\[net\]"$
+murasaki\.(usb|net)\[[0-9]+\]: dependent\(net\) is found$
+murasaki\.(usb|net)\[[0-9]+\]: net device is (added|removed|(un)?register(e)?d)$
+murasaki\.(usb|net)\[[0-9]+\]: Execuing "net" "(stop|start)"$
+murasaki\.(usb|net)\[[0-9]+\]: execute if(up|down) (eth|(i)?ppp|irda)[0-9]$
+murasaki\.usb\[[0-9]+\]: (MATCH\(audio\) -> match_flags:[[:alnum:]]+ )?vendor:[[:alnum:]]+ product:[[:alnum:]]+ Dclass:[[:alnum:]]+ Dsubclass:[[:alnum:]]+ Dprotocol:[[:alnum:]]+ Iclass:[[:alnum:]]+ Isubclass:[[:alnum:]]+ Iprotocol:[[:alnum:]]+$
 ### ignore.d.server/nagios
-nagios: Auto-save of retention data completed successfully\.
-nagios: LOG ROTATION: DAILY
+nagios: Auto-save of retention data completed successfully\.$
+nagios: LOG ROTATION: DAILY$
 ### ignore.d.server/netatalk.changes
-afpd\[[0-9]+\]: CNID DB initialized using Sleepycat Software: Berkeley DB
-afpd\[[0-9]+\]: removed [^[:space:]]+/net[\.0-9]+node[0-9]+
-afpd\[[0-9]\]: ((dhx|cleartext|randnum/rand2num) )?login: [[:alnum:]]+
-afpd\[[0-9]\]: (server_child\[[0-9]+\] [0-9]+ )?(done|exited 1)
-afpd\[[0-9]\]: ASIP session:[0-9]+\([0-9]+\) from [\.:0-9]+\([0-9]+\)
-afpd\[[0-9]\]: Connection terminated
-afpd\[[0-9]\]: [\.[:alnum:]]+ read, [\.[:alnum:]]+ written
-afpd\[[0-9]\]: [^[:space:]]+: (C|c)onnection timed out
-afpd\[[0-9]\]: [^[:space:]]+: Broken pipe
-afpd\[[0-9]\]: [^[:space:]]+: Connection reset by peer
-afpd\[[0-9]\]: [^[:space:]]+: No route to host
-afpd\[[0-9]\]: [^[:space:]]+: No such file or directory
-afpd\[[0-9]\]: [^[:space:]]+: Permission denied
-afpd\[[0-9]\]: [^[:space:]]+: child timed out
-afpd\[[0-9]\]: afp_openfork: ad_open: File Exists
-afpd\[[0-9]\]: asp_alrm: [0-9]+ timed out
-afpd\[[0-9]\]: login [[:alnum:]]+ \(uid [0-9]+, gid [0-9]+\)
-afpd\[[0-9]\]: login noauth
-afpd\[[0-9]\]: logout [[:alnum:]]+
-afpd\[[0-9]\]: registering [[:alnum:]]+ \(uid [0-9]+\) on [\.0-9]+ as /.+/net[\.0-9]+node[0-9]+
-afpd\[[0-9]\]: session from [\.:0-9]+ on [\.:0-9]+
-afpd\[[0-9]\]: uams_dhx_pam.c :PAM: PAM (Auth OK!|Success -- Success)
-afpd\[[0-9]\]: using codepage directory: /etc/netatalk/nls/maccode\.[\.a-z0-9-]+
-atalkd\[[0-9]+\]: [^[:space:]]+: zip gnireply from [\.0-9]+ \([^[:space:]]+\)
-atalkd\[[0-9]+\]: [^[:space:]]+: zip ignoring gnireply
-atalkd\[[0-9]\]: [^[:space:]]+: Network is unreachable
-atalkd\[[0-9]\]: zip gnireply from [\.0-9]+ \([^[:space:]]+\)
-atalkd\[[0-9]\]: zip ignoring gnireply
-papd\[[0-9]\]: child [0-9]+ done
-papd\[[0-9]\]: child [0-9]+ for "[^[:space:]]+" from [\.0-9]+
+afpd\[[0-9]+\]: CNID DB initialized using Sleepycat Software: Berkeley DB$
+afpd\[[0-9]+\]: removed [^[:space:]]+/net[\.0-9]+node[0-9]+$
+afpd\[[0-9]\]: ((dhx|cleartext|randnum/rand2num) )?login: [[:alnum:]]+$
+afpd\[[0-9]\]: (server_child\[[0-9]+\] [0-9]+ )?(done|exited 1)$
+afpd\[[0-9]\]: ASIP session:[0-9]+\([0-9]+\) from [\.:0-9]+\([0-9]+\)$
+afpd\[[0-9]\]: Connection terminated$
+afpd\[[0-9]\]: [\.[:alnum:]]+ read, [\.[:alnum:]]+ written$
+afpd\[[0-9]\]: [^[:space:]]+: (C|c)onnection timed out$
+afpd\[[0-9]\]: [^[:space:]]+: Broken pipe$
+afpd\[[0-9]\]: [^[:space:]]+: Connection reset by peer$
+afpd\[[0-9]\]: [^[:space:]]+: No route to host$
+afpd\[[0-9]\]: [^[:space:]]+: No such file or directory$
+afpd\[[0-9]\]: [^[:space:]]+: Permission denied$
+afpd\[[0-9]\]: [^[:space:]]+: child timed out$
+afpd\[[0-9]\]: afp_openfork: ad_open: File Exists$
+afpd\[[0-9]\]: asp_alrm: [0-9]+ timed out$
+afpd\[[0-9]\]: login [[:alnum:]]+ \(uid [0-9]+, gid [0-9]+\)$
+afpd\[[0-9]\]: login noauth$
+afpd\[[0-9]\]: logout [[:alnum:]]+$
+afpd\[[0-9]\]: registering [[:alnum:]]+ \(uid [0-9]+\) on [\.0-9]+ as /.+/net[\.0-9]+node[0-9]+$
+afpd\[[0-9]\]: session from [\.:0-9]+ on [\.:0-9]+$
+afpd\[[0-9]\]: uams_dhx_pam.c :PAM: PAM (Auth OK!|Success -- Success)$
+afpd\[[0-9]\]: using codepage directory: /etc/netatalk/nls/maccode\.[\.a-z0-9-]+$
+atalkd\[[0-9]+\]: [^[:space:]]+: zip gnireply from [\.0-9]+ \([^[:space:]]+\)$
+atalkd\[[0-9]+\]: [^[:space:]]+: zip ignoring gnireply$
+atalkd\[[0-9]\]: [^[:space:]]+: Network is unreachable$
+atalkd\[[0-9]\]: zip gnireply from [\.0-9]+ \([^[:space:]]+\)$
+atalkd\[[0-9]\]: zip ignoring gnireply$
+papd\[[0-9]\]: child [0-9]+ done$
+papd\[[0-9]\]: child [0-9]+ for "[^[:space:]]+" from [\.0-9]+$
 ### ignore.d.server/netsaint
-netsaint: Auto-save of retention data completed successfully\.
-netsaint: (HOST|SERVICE) (ALERT|NOTIFICATION|FLAPPING ALERT): .*
+netsaint: Auto-save of retention data completed successfully\.$
+netsaint: (HOST|SERVICE) (ALERT|NOTIFICATION|FLAPPING ALERT): .*$
 ### ignore.d.server/nfs-kernel-server
-mountd\[[0-9]+\]: NFS mount of /[^[:space:]]+ attempted from [\.0-9]+
-mountd\[[0-9]+\]: /[^[:space:]]+ has been mounted by [\.0-9]+
+mountd\[[0-9]+\]: NFS mount of /[^[:space:]]+ attempted from [\.0-9]+$
+mountd\[[0-9]+\]: /[^[:space:]]+ has been mounted by [\.0-9]+$
 ### ignore.d.server/non-debian
 # These entries are for syslogd open for remote hosts
 # (and advertised through DHCP)
 #
 # HP printers
-printer: peripheral low-power state
-printer: paper out
-printer: error cleared
-printer: powered up
-printer: ready to print
+printer: peripheral low-power state$
+printer: paper out$
+printer: error cleared$
+printer: powered up$
+printer: ready to print$
 ### ignore.d.server/ntp-simple.changes
-ntpd\[[0-9]+\]: kern_enable is 1
-ntpd\[[0-9]+\]: kernel time discipline status [0-9]+
-ntpd\[[0-9]+\]: precision = [0-9]+ usec
-ntpd\[[0-9]+\]: signal_no_reset: signal 13 had flags [0-9]+
-ntpd\[[0-9]+\]: using kernel phase-lock loop [0-9]+
+ntpd\[[0-9]+\]: kern_enable is 1$
+ntpd\[[0-9]+\]: kernel time discipline status [0-9]+$
+ntpd\[[0-9]+\]: precision = [0-9]+ usec$
+ntpd\[[0-9]+\]: signal_no_reset: signal 13 had flags [0-9]+$
+ntpd\[[0-9]+\]: using kernel phase-lock loop [0-9]+$
 ### ignore.d.server/pop-before-smtp
-pop-before-smtp\[[0-9]+\]: (opening|closing) relay for [\.0-9]+( --- not in mynetworks)?
+pop-before-smtp\[[0-9]+\]: (opening|closing) relay for [\.0-9]+( --- not in mynetworks)?$
 ### ignore.d.server/postfix
-postfix/[[:alnum:]]+\[[0-9]+\]: table has changed -- exiting
-postfix/cleanup\[[0-9]+\]: warning: premature end-of-input from cleanup socket while reading input attribute name
-postfix/local\[[0-9]+\]: warning: unable to create lock file /var/mail/[[:alnum:]]+\.lock: Permission denied
-postfix/master\[[0-9]+\]: reload configuration
-postfix/postfix-script: refreshing the Postfix mail system
-postfix/qmgr\[[0-9]+\]: [A-Z0-9]+: skipped, still being delivered
-postfix/smtp\[[0-9]+\]: [A-Z0-9]+: enabling PIX <CRLF>\.<CRLF> workaround for [^[:space:]]+\[[\.0-9]+\]
-postfix/smtp\[[0-9]+\]: [^[:space:]]+ status=deferred \(connect to [^[:space:]]+: (Connection refused|server refused mail service)\)
-postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+: (Connection (refused|reset by peer|timed out)|read timeout|server (refused mail service|dropped connection)|No route to host) \(port 25\)
-postfix/smtp\[[0-9]+\]: warning: bad size limit "truncates" in EHLO reply from [^[:space:]]+
-postfix/smtp\[[0-9]+\]: warning: host [^[:space:]]+\[[\.0-9]+\] (greeted me|replied to HELO/EHLO) with my own hostname [^[:space:]]+
-postfix/smtp\[[0-9]+\]: warning: mailer loop: best MX host for [^[:space:]]+ is local
-postfix/smtp\[[0-9]+\]: warning: malformed domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]+
-postfix/smtp\[[0-9]+\]: warning: no MX host for [^[:space:]]+ has a valid A record
-postfix/smtp\[[0-9]+\]: warning: numeric domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]+
-postfix/smtp\[[0-9]+\]: warning: valid_hostname: invalid character [0-9]+\(decimal\): [^[:space:]]+
-postfix/smtpd\[[0-9]+\]: (lost connection|timeout) after [^ ]+ from [^[:space:]]+\[[\.0-9]+\]
+postfix/[[:alnum:]]+\[[0-9]+\]: table has changed -- exiting$
+postfix/cleanup\[[0-9]+\]: warning: premature end-of-input from cleanup socket while reading input attribute name$
+postfix/local\[[0-9]+\]: warning: unable to create lock file /var/mail/[[:alnum:]]+\.lock: Permission denied$
+postfix/master\[[0-9]+\]: reload configuration$
+postfix/postfix-script: refreshing the Postfix mail system$
+postfix/qmgr\[[0-9]+\]: [A-Z0-9]+: skipped, still being delivered$
+postfix/smtp\[[0-9]+\]: [A-Z0-9]+: enabling PIX <CRLF>\.<CRLF> workaround for [^[:space:]]+\[[\.0-9]+\]$
+postfix/smtp\[[0-9]+\]: [^[:space:]]+ status=deferred \(connect to [^[:space:]]+: (Connection refused|server refused mail service)\)$
+postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+: (Connection (refused|reset by peer|timed out)|read timeout|server (refused mail service|dropped connection)|No route to host) \(port 25\)$
+postfix/smtp\[[0-9]+\]: warning: bad size limit "truncates" in EHLO reply from [^[:space:]]+$
+postfix/smtp\[[0-9]+\]: warning: host [^[:space:]]+\[[\.0-9]+\] (greeted me|replied to HELO/EHLO) with my own hostname [^[:space:]]+$
+postfix/smtp\[[0-9]+\]: warning: mailer loop: best MX host for [^[:space:]]+ is local$
+postfix/smtp\[[0-9]+\]: warning: malformed domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]+$
+postfix/smtp\[[0-9]+\]: warning: no MX host for [^[:space:]]+ has a valid A record$
+postfix/smtp\[[0-9]+\]: warning: numeric domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]+$
+postfix/smtp\[[0-9]+\]: warning: valid_hostname: invalid character [0-9]+\(decimal\): [^[:space:]]+$
+postfix/smtpd\[[0-9]+\]: (lost connection|timeout) after [^ ]+ from [^[:space:]]+\[[\.0-9]+\]$
 postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+ sent (message header|mail content) instead of SMTP command:
-postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+: address not listed for hostname [^[:space:]]+
-postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+: hostname [^[:space:]]+ verification failed: Host (name has no address|not found)
-postfix/smtpd\[[0-9]+\]: warning: numeric domain name in resource data of MX record for [^[:space:]]+: [\.0-9]+
+postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+: address not listed for hostname [^[:space:]]+$
+postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+: hostname [^[:space:]]+ verification failed: Host (name has no address|not found)$
+postfix/smtpd\[[0-9]+\]: warning: numeric domain name in resource data of MX record for [^[:space:]]+: [\.0-9]+$
 ### ignore.d.server/postgresql
-postgres\[[0-9]+\]: \[[0-9-]+\] \^ICPU .* sec elapsed .* sec\.
-postgres\[[0-9]+\]: \[[0-9-]+\] \^ITotal CPU .* sec elapsed .* sec\.
+postgres\[[0-9]+\]: \[[0-9-]+\] \^ICPU .* sec elapsed .* sec\.$
+postgres\[[0-9]+\]: \[[0-9-]+\] \^ITotal CPU .* sec elapsed .* sec\.$
 ### ignore.d.server/ppp
-chat\[[0-9]+\]: abort on \(.*\)
-chat\[[0-9]+\]: expect \(.*\)
-chat\[[0-9]+\]: send \(AT.*\^M\)
-chat\[[0-9]+\]:  -- got it
-chat\[[0-9]+\]: AT.*\^M\^M
-chat\[[0-9]+\]: \^M
-chat\[[0-9]+\]: CONNECT
-chat\[[0-9]+\]: OK
-chat\[[0-9]+\]: send \(\\d\)
+chat\[[0-9]+\]: abort on \(.*\)$
+chat\[[0-9]+\]: expect \(.*\)$
+chat\[[0-9]+\]: send \(AT.*\^M\)$
+chat\[[0-9]+\]:  -- got it$
+chat\[[0-9]+\]: AT.*\^M\^M$
+chat\[[0-9]+\]: \^M$
+chat\[[0-9]+\]: CONNECT$
+chat\[[0-9]+\]: OK$
+chat\[[0-9]+\]: send \(\\d\)$
 ### ignore.d.server/proftpd
-proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]]+\[[\.0-9]+\]\) - FTP session opened\.
-proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]]+\[[\.0-9]+\]\) - FTP login timed out, disconnected\.
-proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]]+\[[\.0-9]+\]\) - USER [^[:space:]]+: no such user found from .*\[[\.0-9]+\] to [\.0-9]+
-proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]]+\[[\.0-9]+\]\) - no such user '[^[:space:]]+'
-proftpd\[[0-9]+\]: connect from [\.0-9]+
-proftpd\[[0-9]+\]: No certificate files found!
-proftpd\[[0-9]+\]: [^[:space:]]+ ([^[:space:]]+\[[\.0-9]\]) - Refused PORT.* (address mismatch)\.
+proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP session opened\.$
+proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP login timed out, disconnected\.$
+proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - USER [^[:space:]]+: no such user found from .*\[[\.0-9]+\] to [\.0-9]+$
+proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - no such user '[^[:space:]]+'$
+proftpd\[[0-9]+\]: connect from [\.0-9]+$
+proftpd\[[0-9]+\]: No certificate files found!$
+proftpd\[[0-9]+\]: [^[:space:]]+ ([^[:space:]\[]+\[[\.0-9]\]) - Refused PORT.* (address mismatch)\.$
 ### ignore.d.server/rpld
-rpld\[[0-9]+\]: client [:a-f0-9]+ requested block [\.0-9]+
+rpld\[[0-9]+\]: client [:a-f0-9]+ requested block [\.0-9]+$
 ### ignore.d.server/samba
-smbd\[[0-9]+\]:   read(_socket)?_data: (read|recv) failure for 4\. Error = (No route to host|Connection reset by peer)
-smbd\[[0-9]+\]: \[[/0-9]+ [0-9:]+, [0-9]+\] lib/util_sock.c:read(_socket)?_data\([0-9]+\)
+smbd\[[0-9]+\]:   read(_socket)?_data: (read|recv) failure for 4\. Error = (No route to host|Connection reset by peer)$
+smbd\[[0-9]+\]: \[[/0-9]+ [0-9:]+, [0-9]+\] lib/util_sock.c:read(_socket)?_data\([0-9]+\)$
 ### ignore.d.server/sfs-client
-: nfsmounter: mounted /sfs/\.linuxmnt/[^[:blank:]]+:[0-9a-z]+/r
-: sfsrwcd: [^[:blank:]]+:[0-9a-z]+ deleted
+: nfsmounter: mounted /sfs/\.linuxmnt/[^[:blank:]]+:[0-9a-z]+/r$
+: sfsrwcd: [^[:blank:]]+:[0-9a-z]+ deleted$
 ### ignore.d.server/sfs-server
 : sfsauthd: serving [^:]+:[0-9a-z]+$
-: sfssd: accepted connection from [\.0-9]+
+: sfssd: accepted connection from [\.0-9]+$
 ### ignore.d.server/spamassassin
 spamd\[[0-9]+\]: Creating default_prefs
 spamd\[[0-9]+\]: connection from .* at port
@@ -265,26 +264,28 @@ spamd\[[0-9]+\]: clean message for
 spamd\[[0-9]+\]: identified spam for
 spamd\[[0-9]+\]: skipped large message in
 ### ignore.d.server/squid
-squid\[[0-9]+\]:   Finished.  Wrote [0-9]+ entries\.
-squid\[[0-9]+\]:   Took [\.0-9]+ seconds \(.* entries/sec\)\.
-squid\[[0-9]+\]: (access|store)LogRotate: Rotating(\.)?
-squid\[[0-9]+\]: logfileRotate: /var/log/squid/(access|store).log
-squid\[[0-9]+\]: (Closing Pinger socket|Pinger socket opened) on FD [0-9]+
-squid\[[0-9]+\]: NETDB state saved;
-squid\[[0-9]+\]: storeDirWriteCleanLogs: Starting\.\.\.
+squid\[[0-9]+\]:   Finished.  Wrote [0-9]+ entries\.$
+squid\[[0-9]+\]:   Took [\.0-9]+ seconds \([\.0-9]+ entries/sec\)\.$
+squid\[[0-9]+\]: (Closing Pinger socket|Pinger socket opened) on FD [0-9]+$
+squid\[[0-9]+\]: (access|store)LogRotate: Rotating(\.)?$
+squid\[[0-9]+\]: NETDB state saved;$
 squid\[[0-9]+\]: helperOpenServers: Starting [0-9]+ '.*' processes
+squid\[[0-9]+\]: logfileRotate: /var/log/squid/(access|store).log$
+squid\[[0-9]+\]: sslReadServer: FD [0-9]+: read failure: \(104\) Connection reset by peer$
+squid\[[0-9]+\]: storeDirWriteCleanLogs: Starting\.\.\.$
+squid\[[0-9]+\]: urlParse: Illegal character in hostname '[^']+'$
 ### ignore.d.server/ssh
-sshd\[[0-9]+\]: syslogin_perform_logout: logout\(\) returned an error
+sshd\[[0-9]+\]: syslogin_perform_logout: logout\(\) returned an error$
 sshd\[[0-9]+\]: Could not reverse map address .*\.
 sshd\[[0-9]+\]: Connection closed by .*
-sshd\[[0-9]+\]: Did not receive ident(ification)? string from [\.0-9]+
-sshd\[[0-9]+\]: scanned from [\.0-9]+ with SSH-1\.0-SSH_Version_Mapper\.  Don't panic\.
-sshd\[[0-9]+\]: Disconnecting: Your ssh version is too old and is no longer supported\.  Please install a newer version\.
-sshd\[[0-9]+\]: Accepted (keyboard-interactive|publickey) for [[:alnum:]]+ from [\.0-9]+ port [0-9]+ ssh2
+sshd\[[0-9]+\]: Did not receive ident(ification)? string from [\.0-9]+$
+sshd\[[0-9]+\]: scanned from [\.0-9]+ with SSH-1\.0-SSH_Version_Mapper\.  Don't panic\.$
+sshd\[[0-9]+\]: Disconnecting: Your ssh version is too old and is no longer supported\.  Please install a newer version\.$
+sshd\[[0-9]+\]: Accepted (keyboard-interactive|publickey) for [[:alnum:]]+ from [\.0-9]+ port [0-9]+ ssh2$
 sshd\[[0-9]+\]: warning: /etc/hosts.deny, line 15: can't verify hostname: gethostbyname(.*) failed
 sshd\[[0-9]+\]: refused connect from .*
-sshd\[[0-9]+\]: Received disconnect from [\.0-9]+: 11: Disconnect requested by Windows SSH Client.
-sshd\[[0-9]+\]: subsystem request for sftp
+sshd\[[0-9]+\]: Received disconnect from [\.0-9]+: 11: Disconnect requested by Windows SSH Client.$
+sshd\[[0-9]+\]: subsystem request for sftp$
 ### ignore.d.server/ssmtp
 sSMTP mail\[[0-9]+\]: .* sent mail for root
 ### ignore.d.server/tftpd
@@ -378,14 +379,14 @@ amavis\[[0-9]+\]: warning - MIME::Parser error: .*
 ### ignore.d.server/ucd-snmp
 ucd-snmp\[[0-9]+\]: Connection from .*
 ### ignore.d.server/uw-imap.changes
-i(map|pop(2|3))d\[[0-9]+\]: (Broken pipe|Command stream end of file|Connection (reset by peer|timed out))(,)? while (reading (authentication|line|literal|char)|writing text) (user=.* )?host=(([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)
-i(map|pop3)d\[[0-9]+\]: (Login|Auth|Authenticated|Logout|Autologout) user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)
-i(map|pop3)d\[[0-9]+\]: Killed \(lost mailbox lock\) user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)
-i(map|pop3)d\[[0-9]+\]: Moved [0-9]+ bytes of new mail to [^[:space:]]+ from [^[:space:]]+ host= (([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)
+i(map|pop(2|3))d\[[0-9]+\]: (Broken pipe|Command stream end of file|Connection (reset by peer|timed out))(,)? while (reading (authentication|line|literal|char)|writing text) (user=.* )?host=(([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)$
+i(map|pop3)d\[[0-9]+\]: (Login|Auth|Authenticated|Logout|Autologout) user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)$
+i(map|pop3)d\[[0-9]+\]: Killed \(lost mailbox lock\) user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)$
+i(map|pop3)d\[[0-9]+\]: Moved [0-9]+ bytes of new mail to [^[:space:]]+ from [^[:space:]]+ host= (([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)$
 imapd\[[0-9]+\]: (port (143|220)|imap|imaps SSL) service init from
-imapd\[[0-9]+\]: No route to host, while reading line user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)
-ipop3d\[[0-9]+\]: Error opening or locking INBOX user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)
-ipop3d\[[0-9]+\]: Expunge ignored on readonly mailbox
-ipop3d\[[0-9]+\]: Mailbox is open by another process, access is readonly
-ipop3d\[[0-9]+\]: Trying to get mailbox lock from process [0-9]+
-ipop[2|3]d\[[0-9]+\]: (connect|pop3(s SSL)? service init) from [\.0-9]+
+imapd\[[0-9]+\]: No route to host, while reading line user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)$
+ipop3d\[[0-9]+\]: Error opening or locking INBOX user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)$
+ipop3d\[[0-9]+\]: Expunge ignored on readonly mailbox$
+ipop3d\[[0-9]+\]: Mailbox is open by another process, access is readonly$
+ipop3d\[[0-9]+\]: Trying to get mailbox lock from process [0-9]+$
+ipop[2|3]d\[[0-9]+\]: (connect|pop3(s SSL)? service init) from [\.0-9]+$
diff --git a/logcheck/ignore.d.server/mailutils-imap4d b/logcheck/ignore.d.server/mailutils-imap4d
index 7e61a9c..328d24c 100644
--- a/logcheck/ignore.d.server/mailutils-imap4d
+++ b/logcheck/ignore.d.server/mailutils-imap4d
@@ -1,5 +1,5 @@
-gnu-imap4d\[[0-9]+\]: Incoming connection opened
-gnu-imap4d\[[0-9]+\]: connect from [\.0-9]+
-gnu-imap4d\[[0-9]+\]: User '[[:alnum:]]+' logged in
-gnu-imap4d\[[0-9]+\]: Session timed out for user: [[:alnum:]]+
-gnu-imap4d\[[0-9]+\]: got signal Alarm clock
+gnu-imap4d\[[0-9]+\]: Incoming connection opened$
+gnu-imap4d\[[0-9]+\]: connect from [\.0-9]+$
+gnu-imap4d\[[0-9]+\]: User '[[:alnum:]]+' logged in$
+gnu-imap4d\[[0-9]+\]: Session timed out for user: [[:alnum:]]+$
+gnu-imap4d\[[0-9]+\]: got signal Alarm clock$
diff --git a/logcheck/ignore.d.server/misc b/logcheck/ignore.d.server/misc
index c090503..2f37753 100644
--- a/logcheck/ignore.d.server/misc
+++ b/logcheck/ignore.d.server/misc
@@ -4,7 +4,7 @@ dhcpd.*: already acking lease
 dhcpd.*: send_packet: Connection refused
 dhcpd.*: fallback_discard: Connection refused
 # These show up when isdnutils is installed, but isn't strictly related to those packages
-kernel: isdn_net: call from [,0-9]+ -> [0-9]+
-kernel: isdn_net: Service-Indicator not [0-9], ignored
+kernel: isdn_net: call from [,0-9]+ -> [0-9]+$
+kernel: isdn_net: Service-Indicator not [0-9], ignored$
 # This one shows up with firewalls blocking SMB ports non-silently
 kernel: Packet log: input DENY eth[0-9]+ PROTO=17 .*:(137|138) .*:(137|138) L=[0-9]+ S=0x00 I=[0-9]+ F=0x0000 T=[0-9]+ \(#[0-9]+\)
diff --git a/logcheck/ignore.d.server/murasaki b/logcheck/ignore.d.server/murasaki
index 0b2a1c4..a4af7d5 100644
--- a/logcheck/ignore.d.server/murasaki
+++ b/logcheck/ignore.d.server/murasaki
@@ -1,7 +1,7 @@
-murasaki\.usb\[[0-9]+\]: found depended module="[[:alnum:]]+"
-murasaki\.(usb|net)\[[0-9]+\]: try expanding "\[net\]"
-murasaki\.(usb|net)\[[0-9]+\]: dependent\(net\) is found
-murasaki\.(usb|net)\[[0-9]+\]: net device is (added|removed|(un)?register(e)?d)
-murasaki\.(usb|net)\[[0-9]+\]: Execuing "net" "(stop|start)"
-murasaki\.(usb|net)\[[0-9]+\]: execute if(up|down) (eth|(i)?ppp|irda)[0-9]
-murasaki\.usb\[[0-9]+\]: (MATCH\(audio\) -> match_flags:[[:alnum:]]+ )?vendor:[[:alnum:]]+ product:[[:alnum:]]+ Dclass:[[:alnum:]]+ Dsubclass:[[:alnum:]]+ Dprotocol:[[:alnum:]]+ Iclass:[[:alnum:]]+ Isubclass:[[:alnum:]]+ Iprotocol:[[:alnum:]]+
+murasaki\.usb\[[0-9]+\]: found depended module="[[:alnum:]]+"$
+murasaki\.(usb|net)\[[0-9]+\]: try expanding "\[net\]"$
+murasaki\.(usb|net)\[[0-9]+\]: dependent\(net\) is found$
+murasaki\.(usb|net)\[[0-9]+\]: net device is (added|removed|(un)?register(e)?d)$
+murasaki\.(usb|net)\[[0-9]+\]: Execuing "net" "(stop|start)"$
+murasaki\.(usb|net)\[[0-9]+\]: execute if(up|down) (eth|(i)?ppp|irda)[0-9]$
+murasaki\.usb\[[0-9]+\]: (MATCH\(audio\) -> match_flags:[[:alnum:]]+ )?vendor:[[:alnum:]]+ product:[[:alnum:]]+ Dclass:[[:alnum:]]+ Dsubclass:[[:alnum:]]+ Dprotocol:[[:alnum:]]+ Iclass:[[:alnum:]]+ Isubclass:[[:alnum:]]+ Iprotocol:[[:alnum:]]+$
diff --git a/logcheck/ignore.d.server/nagios b/logcheck/ignore.d.server/nagios
index 7510ea7..9d85d89 100644
--- a/logcheck/ignore.d.server/nagios
+++ b/logcheck/ignore.d.server/nagios
@@ -1,2 +1,2 @@
-nagios: Auto-save of retention data completed successfully\.
-nagios: LOG ROTATION: DAILY
+nagios: Auto-save of retention data completed successfully\.$
+nagios: LOG ROTATION: DAILY$
diff --git a/logcheck/ignore.d.server/netatalk.changes b/logcheck/ignore.d.server/netatalk.changes
index 012d118..8614fc3 100644
--- a/logcheck/ignore.d.server/netatalk.changes
+++ b/logcheck/ignore.d.server/netatalk.changes
@@ -1,30 +1,30 @@
-afpd\[[0-9]+\]: CNID DB initialized using Sleepycat Software: Berkeley DB
-afpd\[[0-9]+\]: removed [^[:space:]]+/net[\.0-9]+node[0-9]+
-afpd\[[0-9]\]: ((dhx|cleartext|randnum/rand2num) )?login: [[:alnum:]]+
-afpd\[[0-9]\]: (server_child\[[0-9]+\] [0-9]+ )?(done|exited 1)
-afpd\[[0-9]\]: ASIP session:[0-9]+\([0-9]+\) from [\.:0-9]+\([0-9]+\)
-afpd\[[0-9]\]: Connection terminated
-afpd\[[0-9]\]: [\.[:alnum:]]+ read, [\.[:alnum:]]+ written
-afpd\[[0-9]\]: [^[:space:]]+: (C|c)onnection timed out
-afpd\[[0-9]\]: [^[:space:]]+: Broken pipe
-afpd\[[0-9]\]: [^[:space:]]+: Connection reset by peer
-afpd\[[0-9]\]: [^[:space:]]+: No route to host
-afpd\[[0-9]\]: [^[:space:]]+: No such file or directory
-afpd\[[0-9]\]: [^[:space:]]+: Permission denied
-afpd\[[0-9]\]: [^[:space:]]+: child timed out
-afpd\[[0-9]\]: afp_openfork: ad_open: File Exists
-afpd\[[0-9]\]: asp_alrm: [0-9]+ timed out
-afpd\[[0-9]\]: login [[:alnum:]]+ \(uid [0-9]+, gid [0-9]+\)
-afpd\[[0-9]\]: login noauth
-afpd\[[0-9]\]: logout [[:alnum:]]+
-afpd\[[0-9]\]: registering [[:alnum:]]+ \(uid [0-9]+\) on [\.0-9]+ as /.+/net[\.0-9]+node[0-9]+
-afpd\[[0-9]\]: session from [\.:0-9]+ on [\.:0-9]+
-afpd\[[0-9]\]: uams_dhx_pam.c :PAM: PAM (Auth OK!|Success -- Success)
-afpd\[[0-9]\]: using codepage directory: /etc/netatalk/nls/maccode\.[\.a-z0-9-]+
-atalkd\[[0-9]+\]: [^[:space:]]+: zip gnireply from [\.0-9]+ \([^[:space:]]+\)
-atalkd\[[0-9]+\]: [^[:space:]]+: zip ignoring gnireply
-atalkd\[[0-9]\]: [^[:space:]]+: Network is unreachable
-atalkd\[[0-9]\]: zip gnireply from [\.0-9]+ \([^[:space:]]+\)
-atalkd\[[0-9]\]: zip ignoring gnireply
-papd\[[0-9]\]: child [0-9]+ done
-papd\[[0-9]\]: child [0-9]+ for "[^[:space:]]+" from [\.0-9]+
+afpd\[[0-9]+\]: CNID DB initialized using Sleepycat Software: Berkeley DB$
+afpd\[[0-9]+\]: removed [^[:space:]]+/net[\.0-9]+node[0-9]+$
+afpd\[[0-9]\]: ((dhx|cleartext|randnum/rand2num) )?login: [[:alnum:]]+$
+afpd\[[0-9]\]: (server_child\[[0-9]+\] [0-9]+ )?(done|exited 1)$
+afpd\[[0-9]\]: ASIP session:[0-9]+\([0-9]+\) from [\.:0-9]+\([0-9]+\)$
+afpd\[[0-9]\]: Connection terminated$
+afpd\[[0-9]\]: [\.[:alnum:]]+ read, [\.[:alnum:]]+ written$
+afpd\[[0-9]\]: [^[:space:]]+: (C|c)onnection timed out$
+afpd\[[0-9]\]: [^[:space:]]+: Broken pipe$
+afpd\[[0-9]\]: [^[:space:]]+: Connection reset by peer$
+afpd\[[0-9]\]: [^[:space:]]+: No route to host$
+afpd\[[0-9]\]: [^[:space:]]+: No such file or directory$
+afpd\[[0-9]\]: [^[:space:]]+: Permission denied$
+afpd\[[0-9]\]: [^[:space:]]+: child timed out$
+afpd\[[0-9]\]: afp_openfork: ad_open: File Exists$
+afpd\[[0-9]\]: asp_alrm: [0-9]+ timed out$
+afpd\[[0-9]\]: login [[:alnum:]]+ \(uid [0-9]+, gid [0-9]+\)$
+afpd\[[0-9]\]: login noauth$
+afpd\[[0-9]\]: logout [[:alnum:]]+$
+afpd\[[0-9]\]: registering [[:alnum:]]+ \(uid [0-9]+\) on [\.0-9]+ as /.+/net[\.0-9]+node[0-9]+$
+afpd\[[0-9]\]: session from [\.:0-9]+ on [\.:0-9]+$
+afpd\[[0-9]\]: uams_dhx_pam.c :PAM: PAM (Auth OK!|Success -- Success)$
+afpd\[[0-9]\]: using codepage directory: /etc/netatalk/nls/maccode\.[\.a-z0-9-]+$
+atalkd\[[0-9]+\]: [^[:space:]]+: zip gnireply from [\.0-9]+ \([^[:space:]]+\)$
+atalkd\[[0-9]+\]: [^[:space:]]+: zip ignoring gnireply$
+atalkd\[[0-9]\]: [^[:space:]]+: Network is unreachable$
+atalkd\[[0-9]\]: zip gnireply from [\.0-9]+ \([^[:space:]]+\)$
+atalkd\[[0-9]\]: zip ignoring gnireply$
+papd\[[0-9]\]: child [0-9]+ done$
+papd\[[0-9]\]: child [0-9]+ for "[^[:space:]]+" from [\.0-9]+$
diff --git a/logcheck/ignore.d.server/netsaint b/logcheck/ignore.d.server/netsaint
index 3354176..8167301 100644
--- a/logcheck/ignore.d.server/netsaint
+++ b/logcheck/ignore.d.server/netsaint
@@ -1,2 +1,2 @@
-netsaint: Auto-save of retention data completed successfully\.
-netsaint: (HOST|SERVICE) (ALERT|NOTIFICATION|FLAPPING ALERT): .*
+netsaint: Auto-save of retention data completed successfully\.$
+netsaint: (HOST|SERVICE) (ALERT|NOTIFICATION|FLAPPING ALERT): .*$
diff --git a/logcheck/ignore.d.server/nfs-kernel-server b/logcheck/ignore.d.server/nfs-kernel-server
index f67c677..f77a9ed 100644
--- a/logcheck/ignore.d.server/nfs-kernel-server
+++ b/logcheck/ignore.d.server/nfs-kernel-server
@@ -1,2 +1,2 @@
-mountd\[[0-9]+\]: NFS mount of /[^[:space:]]+ attempted from [\.0-9]+
-mountd\[[0-9]+\]: /[^[:space:]]+ has been mounted by [\.0-9]+
+mountd\[[0-9]+\]: NFS mount of /[^[:space:]]+ attempted from [\.0-9]+$
+mountd\[[0-9]+\]: /[^[:space:]]+ has been mounted by [\.0-9]+$
diff --git a/logcheck/ignore.d.server/non-debian b/logcheck/ignore.d.server/non-debian
index 5ea4ca8..68f64e4 100644
--- a/logcheck/ignore.d.server/non-debian
+++ b/logcheck/ignore.d.server/non-debian
@@ -2,8 +2,8 @@
 # (and advertised through DHCP)
 #
 # HP printers
-printer: peripheral low-power state
-printer: paper out
-printer: error cleared
-printer: powered up
-printer: ready to print
+printer: peripheral low-power state$
+printer: paper out$
+printer: error cleared$
+printer: powered up$
+printer: ready to print$
diff --git a/logcheck/ignore.d.server/ntp-simple.changes b/logcheck/ignore.d.server/ntp-simple.changes
index 0f8b276..fd203af 100644
--- a/logcheck/ignore.d.server/ntp-simple.changes
+++ b/logcheck/ignore.d.server/ntp-simple.changes
@@ -1,5 +1,5 @@
-ntpd\[[0-9]+\]: kern_enable is 1
-ntpd\[[0-9]+\]: kernel time discipline status [0-9]+
-ntpd\[[0-9]+\]: precision = [0-9]+ usec
-ntpd\[[0-9]+\]: signal_no_reset: signal 13 had flags [0-9]+
-ntpd\[[0-9]+\]: using kernel phase-lock loop [0-9]+
+ntpd\[[0-9]+\]: kern_enable is 1$
+ntpd\[[0-9]+\]: kernel time discipline status [0-9]+$
+ntpd\[[0-9]+\]: precision = [0-9]+ usec$
+ntpd\[[0-9]+\]: signal_no_reset: signal 13 had flags [0-9]+$
+ntpd\[[0-9]+\]: using kernel phase-lock loop [0-9]+$
diff --git a/logcheck/ignore.d.server/pop-before-smtp b/logcheck/ignore.d.server/pop-before-smtp
index 5b34ea0..4ff492b 100644
--- a/logcheck/ignore.d.server/pop-before-smtp
+++ b/logcheck/ignore.d.server/pop-before-smtp
@@ -1 +1 @@
-pop-before-smtp\[[0-9]+\]: (opening|closing) relay for [\.0-9]+( --- not in mynetworks)?
+pop-before-smtp\[[0-9]+\]: (opening|closing) relay for [\.0-9]+( --- not in mynetworks)?$
diff --git a/logcheck/ignore.d.server/postfix b/logcheck/ignore.d.server/postfix
index 45fd165..e0c53ae 100644
--- a/logcheck/ignore.d.server/postfix
+++ b/logcheck/ignore.d.server/postfix
@@ -1,21 +1,21 @@
-postfix/[[:alnum:]]+\[[0-9]+\]: table has changed -- exiting
-postfix/cleanup\[[0-9]+\]: warning: premature end-of-input from cleanup socket while reading input attribute name
-postfix/local\[[0-9]+\]: warning: unable to create lock file /var/mail/[[:alnum:]]+\.lock: Permission denied
-postfix/master\[[0-9]+\]: reload configuration
-postfix/postfix-script: refreshing the Postfix mail system
-postfix/qmgr\[[0-9]+\]: [A-Z0-9]+: skipped, still being delivered
-postfix/smtp\[[0-9]+\]: [A-Z0-9]+: enabling PIX <CRLF>\.<CRLF> workaround for [^[:space:]]+\[[\.0-9]+\]
-postfix/smtp\[[0-9]+\]: [^[:space:]]+ status=deferred \(connect to [^[:space:]]+: (Connection refused|server refused mail service)\)
-postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+: (Connection (refused|reset by peer|timed out)|read timeout|server (refused mail service|dropped connection)|No route to host) \(port 25\)
-postfix/smtp\[[0-9]+\]: warning: bad size limit "truncates" in EHLO reply from [^[:space:]]+
-postfix/smtp\[[0-9]+\]: warning: host [^[:space:]]+\[[\.0-9]+\] (greeted me|replied to HELO/EHLO) with my own hostname [^[:space:]]+
-postfix/smtp\[[0-9]+\]: warning: mailer loop: best MX host for [^[:space:]]+ is local
-postfix/smtp\[[0-9]+\]: warning: malformed domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]+
-postfix/smtp\[[0-9]+\]: warning: no MX host for [^[:space:]]+ has a valid A record
-postfix/smtp\[[0-9]+\]: warning: numeric domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]+
-postfix/smtp\[[0-9]+\]: warning: valid_hostname: invalid character [0-9]+\(decimal\): [^[:space:]]+
-postfix/smtpd\[[0-9]+\]: (lost connection|timeout) after [^ ]+ from [^[:space:]]+\[[\.0-9]+\]
+postfix/[[:alnum:]]+\[[0-9]+\]: table has changed -- exiting$
+postfix/cleanup\[[0-9]+\]: warning: premature end-of-input from cleanup socket while reading input attribute name$
+postfix/local\[[0-9]+\]: warning: unable to create lock file /var/mail/[[:alnum:]]+\.lock: Permission denied$
+postfix/master\[[0-9]+\]: reload configuration$
+postfix/postfix-script: refreshing the Postfix mail system$
+postfix/qmgr\[[0-9]+\]: [A-Z0-9]+: skipped, still being delivered$
+postfix/smtp\[[0-9]+\]: [A-Z0-9]+: enabling PIX <CRLF>\.<CRLF> workaround for [^[:space:]]+\[[\.0-9]+\]$
+postfix/smtp\[[0-9]+\]: [^[:space:]]+ status=deferred \(connect to [^[:space:]]+: (Connection refused|server refused mail service)\)$
+postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+: (Connection (refused|reset by peer|timed out)|read timeout|server (refused mail service|dropped connection)|No route to host) \(port 25\)$
+postfix/smtp\[[0-9]+\]: warning: bad size limit "truncates" in EHLO reply from [^[:space:]]+$
+postfix/smtp\[[0-9]+\]: warning: host [^[:space:]]+\[[\.0-9]+\] (greeted me|replied to HELO/EHLO) with my own hostname [^[:space:]]+$
+postfix/smtp\[[0-9]+\]: warning: mailer loop: best MX host for [^[:space:]]+ is local$
+postfix/smtp\[[0-9]+\]: warning: malformed domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]+$
+postfix/smtp\[[0-9]+\]: warning: no MX host for [^[:space:]]+ has a valid A record$
+postfix/smtp\[[0-9]+\]: warning: numeric domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]+$
+postfix/smtp\[[0-9]+\]: warning: valid_hostname: invalid character [0-9]+\(decimal\): [^[:space:]]+$
+postfix/smtpd\[[0-9]+\]: (lost connection|timeout) after [^ ]+ from [^[:space:]]+\[[\.0-9]+\]$
 postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+ sent (message header|mail content) instead of SMTP command:
-postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+: address not listed for hostname [^[:space:]]+
-postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+: hostname [^[:space:]]+ verification failed: Host (name has no address|not found)
-postfix/smtpd\[[0-9]+\]: warning: numeric domain name in resource data of MX record for [^[:space:]]+: [\.0-9]+
+postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+: address not listed for hostname [^[:space:]]+$
+postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+: hostname [^[:space:]]+ verification failed: Host (name has no address|not found)$
+postfix/smtpd\[[0-9]+\]: warning: numeric domain name in resource data of MX record for [^[:space:]]+: [\.0-9]+$
diff --git a/logcheck/ignore.d.server/postgresql b/logcheck/ignore.d.server/postgresql
index 29d90d2..8587cf7 100644
--- a/logcheck/ignore.d.server/postgresql
+++ b/logcheck/ignore.d.server/postgresql
@@ -1,2 +1,2 @@
-postgres\[[0-9]+\]: \[[0-9-]+\] \^ICPU .* sec elapsed .* sec\.
-postgres\[[0-9]+\]: \[[0-9-]+\] \^ITotal CPU .* sec elapsed .* sec\.
+postgres\[[0-9]+\]: \[[0-9-]+\] \^ICPU .* sec elapsed .* sec\.$
+postgres\[[0-9]+\]: \[[0-9-]+\] \^ITotal CPU .* sec elapsed .* sec\.$
diff --git a/logcheck/ignore.d.server/ppp b/logcheck/ignore.d.server/ppp
index 4c240a7..48839cb 100644
--- a/logcheck/ignore.d.server/ppp
+++ b/logcheck/ignore.d.server/ppp
@@ -1,9 +1,9 @@
-chat\[[0-9]+\]: abort on \(.*\)
-chat\[[0-9]+\]: expect \(.*\)
-chat\[[0-9]+\]: send \(AT.*\^M\)
-chat\[[0-9]+\]:  -- got it
-chat\[[0-9]+\]: AT.*\^M\^M
-chat\[[0-9]+\]: \^M
-chat\[[0-9]+\]: CONNECT
-chat\[[0-9]+\]: OK
-chat\[[0-9]+\]: send \(\\d\)
+chat\[[0-9]+\]: abort on \(.*\)$
+chat\[[0-9]+\]: expect \(.*\)$
+chat\[[0-9]+\]: send \(AT.*\^M\)$
+chat\[[0-9]+\]:  -- got it$
+chat\[[0-9]+\]: AT.*\^M\^M$
+chat\[[0-9]+\]: \^M$
+chat\[[0-9]+\]: CONNECT$
+chat\[[0-9]+\]: OK$
+chat\[[0-9]+\]: send \(\\d\)$
diff --git a/logcheck/ignore.d.server/proftpd b/logcheck/ignore.d.server/proftpd
index cdbd41f..a2a4cce 100644
--- a/logcheck/ignore.d.server/proftpd
+++ b/logcheck/ignore.d.server/proftpd
@@ -1,7 +1,7 @@
-proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]]+\[[\.0-9]+\]\) - FTP session opened\.
-proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]]+\[[\.0-9]+\]\) - FTP login timed out, disconnected\.
-proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]]+\[[\.0-9]+\]\) - USER [^[:space:]]+: no such user found from .*\[[\.0-9]+\] to [\.0-9]+
-proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]]+\[[\.0-9]+\]\) - no such user '[^[:space:]]+'
-proftpd\[[0-9]+\]: connect from [\.0-9]+
-proftpd\[[0-9]+\]: No certificate files found!
-proftpd\[[0-9]+\]: [^[:space:]]+ ([^[:space:]]+\[[\.0-9]\]) - Refused PORT.* (address mismatch)\.
+proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP session opened\.$
+proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP login timed out, disconnected\.$
+proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - USER [^[:space:]]+: no such user found from .*\[[\.0-9]+\] to [\.0-9]+$
+proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - no such user '[^[:space:]]+'$
+proftpd\[[0-9]+\]: connect from [\.0-9]+$
+proftpd\[[0-9]+\]: No certificate files found!$
+proftpd\[[0-9]+\]: [^[:space:]]+ ([^[:space:]\[]+\[[\.0-9]\]) - Refused PORT.* (address mismatch)\.$
diff --git a/logcheck/ignore.d.server/rpld b/logcheck/ignore.d.server/rpld
index edc9162..2dc6889 100644
--- a/logcheck/ignore.d.server/rpld
+++ b/logcheck/ignore.d.server/rpld
@@ -1 +1 @@
-rpld\[[0-9]+\]: client [:a-f0-9]+ requested block [\.0-9]+
+rpld\[[0-9]+\]: client [:a-f0-9]+ requested block [\.0-9]+$
diff --git a/logcheck/ignore.d.server/samba b/logcheck/ignore.d.server/samba
index 000daee..868d988 100644
--- a/logcheck/ignore.d.server/samba
+++ b/logcheck/ignore.d.server/samba
@@ -1,2 +1,2 @@
-smbd\[[0-9]+\]:   read(_socket)?_data: (read|recv) failure for 4\. Error = (No route to host|Connection reset by peer)
-smbd\[[0-9]+\]: \[[/0-9]+ [0-9:]+, [0-9]+\] lib/util_sock.c:read(_socket)?_data\([0-9]+\)
+smbd\[[0-9]+\]:   read(_socket)?_data: (read|recv) failure for 4\. Error = (No route to host|Connection reset by peer)$
+smbd\[[0-9]+\]: \[[/0-9]+ [0-9:]+, [0-9]+\] lib/util_sock.c:read(_socket)?_data\([0-9]+\)$
diff --git a/logcheck/ignore.d.server/sfs-client b/logcheck/ignore.d.server/sfs-client
index 98d9e2c..1e77a09 100644
--- a/logcheck/ignore.d.server/sfs-client
+++ b/logcheck/ignore.d.server/sfs-client
@@ -1,2 +1,2 @@
-: nfsmounter: mounted /sfs/\.linuxmnt/[^[:blank:]]+:[0-9a-z]+/r
-: sfsrwcd: [^[:blank:]]+:[0-9a-z]+ deleted
+: nfsmounter: mounted /sfs/\.linuxmnt/[^[:blank:]]+:[0-9a-z]+/r$
+: sfsrwcd: [^[:blank:]]+:[0-9a-z]+ deleted$
diff --git a/logcheck/ignore.d.server/sfs-server b/logcheck/ignore.d.server/sfs-server
index 6f09efb..055b1ad 100644
--- a/logcheck/ignore.d.server/sfs-server
+++ b/logcheck/ignore.d.server/sfs-server
@@ -1,2 +1,2 @@
 : sfsauthd: serving [^:]+:[0-9a-z]+$
-: sfssd: accepted connection from [\.0-9]+
+: sfssd: accepted connection from [\.0-9]+$
diff --git a/logcheck/ignore.d.server/squid b/logcheck/ignore.d.server/squid
index 0317776..e04fe1e 100644
--- a/logcheck/ignore.d.server/squid
+++ b/logcheck/ignore.d.server/squid
@@ -1,8 +1,10 @@
-squid\[[0-9]+\]:   Finished.  Wrote [0-9]+ entries\.
-squid\[[0-9]+\]:   Took [\.0-9]+ seconds \(.* entries/sec\)\.
-squid\[[0-9]+\]: (access|store)LogRotate: Rotating(\.)?
-squid\[[0-9]+\]: logfileRotate: /var/log/squid/(access|store).log
-squid\[[0-9]+\]: (Closing Pinger socket|Pinger socket opened) on FD [0-9]+
-squid\[[0-9]+\]: NETDB state saved;
-squid\[[0-9]+\]: storeDirWriteCleanLogs: Starting\.\.\.
+squid\[[0-9]+\]:   Finished.  Wrote [0-9]+ entries\.$
+squid\[[0-9]+\]:   Took [\.0-9]+ seconds \([\.0-9]+ entries/sec\)\.$
+squid\[[0-9]+\]: (Closing Pinger socket|Pinger socket opened) on FD [0-9]+$
+squid\[[0-9]+\]: (access|store)LogRotate: Rotating(\.)?$
+squid\[[0-9]+\]: NETDB state saved;$
 squid\[[0-9]+\]: helperOpenServers: Starting [0-9]+ '.*' processes
+squid\[[0-9]+\]: logfileRotate: /var/log/squid/(access|store).log$
+squid\[[0-9]+\]: sslReadServer: FD [0-9]+: read failure: \(104\) Connection reset by peer$
+squid\[[0-9]+\]: storeDirWriteCleanLogs: Starting\.\.\.$
+squid\[[0-9]+\]: urlParse: Illegal character in hostname '[^']+'$
diff --git a/logcheck/ignore.d.server/ssh b/logcheck/ignore.d.server/ssh
index 835ed1e..327aaa4 100644
--- a/logcheck/ignore.d.server/ssh
+++ b/logcheck/ignore.d.server/ssh
@@ -1,11 +1,11 @@
-sshd\[[0-9]+\]: syslogin_perform_logout: logout\(\) returned an error
+sshd\[[0-9]+\]: syslogin_perform_logout: logout\(\) returned an error$
 sshd\[[0-9]+\]: Could not reverse map address .*\.
 sshd\[[0-9]+\]: Connection closed by .*
-sshd\[[0-9]+\]: Did not receive ident(ification)? string from [\.0-9]+
-sshd\[[0-9]+\]: scanned from [\.0-9]+ with SSH-1\.0-SSH_Version_Mapper\.  Don't panic\.
-sshd\[[0-9]+\]: Disconnecting: Your ssh version is too old and is no longer supported\.  Please install a newer version\.
-sshd\[[0-9]+\]: Accepted (keyboard-interactive|publickey) for [[:alnum:]]+ from [\.0-9]+ port [0-9]+ ssh2
+sshd\[[0-9]+\]: Did not receive ident(ification)? string from [\.0-9]+$
+sshd\[[0-9]+\]: scanned from [\.0-9]+ with SSH-1\.0-SSH_Version_Mapper\.  Don't panic\.$
+sshd\[[0-9]+\]: Disconnecting: Your ssh version is too old and is no longer supported\.  Please install a newer version\.$
+sshd\[[0-9]+\]: Accepted (keyboard-interactive|publickey) for [[:alnum:]]+ from [\.0-9]+ port [0-9]+ ssh2$
 sshd\[[0-9]+\]: warning: /etc/hosts.deny, line 15: can't verify hostname: gethostbyname(.*) failed
 sshd\[[0-9]+\]: refused connect from .*
-sshd\[[0-9]+\]: Received disconnect from [\.0-9]+: 11: Disconnect requested by Windows SSH Client.
-sshd\[[0-9]+\]: subsystem request for sftp
+sshd\[[0-9]+\]: Received disconnect from [\.0-9]+: 11: Disconnect requested by Windows SSH Client.$
+sshd\[[0-9]+\]: subsystem request for sftp$
diff --git a/logcheck/ignore.d.server/uw-imap.changes b/logcheck/ignore.d.server/uw-imap.changes
index 60fcc1c..fbdd563 100644
--- a/logcheck/ignore.d.server/uw-imap.changes
+++ b/logcheck/ignore.d.server/uw-imap.changes
@@ -1,11 +1,11 @@
-i(map|pop(2|3))d\[[0-9]+\]: (Broken pipe|Command stream end of file|Connection (reset by peer|timed out))(,)? while (reading (authentication|line|literal|char)|writing text) (user=.* )?host=(([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)
-i(map|pop3)d\[[0-9]+\]: (Login|Auth|Authenticated|Logout|Autologout) user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)
-i(map|pop3)d\[[0-9]+\]: Killed \(lost mailbox lock\) user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)
-i(map|pop3)d\[[0-9]+\]: Moved [0-9]+ bytes of new mail to [^[:space:]]+ from [^[:space:]]+ host= (([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)
+i(map|pop(2|3))d\[[0-9]+\]: (Broken pipe|Command stream end of file|Connection (reset by peer|timed out))(,)? while (reading (authentication|line|literal|char)|writing text) (user=.* )?host=(([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)$
+i(map|pop3)d\[[0-9]+\]: (Login|Auth|Authenticated|Logout|Autologout) user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)$
+i(map|pop3)d\[[0-9]+\]: Killed \(lost mailbox lock\) user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)$
+i(map|pop3)d\[[0-9]+\]: Moved [0-9]+ bytes of new mail to [^[:space:]]+ from [^[:space:]]+ host= (([^[:space:]]+ )?\[[\.0-9]+\]|NON-IPv4|UNKNOWN)$
 imapd\[[0-9]+\]: (port (143|220)|imap|imaps SSL) service init from
-imapd\[[0-9]+\]: No route to host, while reading line user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)
-ipop3d\[[0-9]+\]: Error opening or locking INBOX user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)
-ipop3d\[[0-9]+\]: Expunge ignored on readonly mailbox
-ipop3d\[[0-9]+\]: Mailbox is open by another process, access is readonly
-ipop3d\[[0-9]+\]: Trying to get mailbox lock from process [0-9]+
-ipop[2|3]d\[[0-9]+\]: (connect|pop3(s SSL)? service init) from [\.0-9]+
+imapd\[[0-9]+\]: No route to host, while reading line user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)$
+ipop3d\[[0-9]+\]: Error opening or locking INBOX user=.* host=(([^[:space:]]+ )?\[[\.0-9]+\]|UNKNOWN)$
+ipop3d\[[0-9]+\]: Expunge ignored on readonly mailbox$
+ipop3d\[[0-9]+\]: Mailbox is open by another process, access is readonly$
+ipop3d\[[0-9]+\]: Trying to get mailbox lock from process [0-9]+$
+ipop[2|3]d\[[0-9]+\]: (connect|pop3(s SSL)? service init) from [\.0-9]+$