alice:: cat /var/log/daemon.log::SASL client identity is.*carol::YES
alice:: cat /var/log/daemon.log::user AR identity.*carol.*authenticated by password::YES
alice:: cat /var/log/daemon.log::received SWID tag ID inventory for request 6 at eid 1 of epoch::YES
-alice:: cat /var/log/daemon.log::regid.2004-03.org.strongswan_strongSwan-.*.swidtag::YES
+alice:: cat /var/log/daemon.log::regid.2004-03.org.strongswan_strongSwan-::YES
alice:: cat /var/log/daemon.log::accepting PT-TLS stream from PH_IP_DAVE::YES
alice:: cat /var/log/daemon.log::checking certificate status of.*C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org::YES
alice:: cat /var/log/daemon.log::certificate status is good::YES