!syslog-stripdate
-*
+mail.*