!syslog-stripdate
-*
+auth.*
+authpriv.*