[INCLUDES] before = common.conf [Definition] failregex = ^ lvl=[a-zA-z]* msg=\"Invalid username or password\" (?:\S*=(?:\".*\"|\S*) )*remote_addr= ignoreregex = [Init] datepattern = ^t=%%Y-%%m-%%dT%%H:%%M:%%S%%z