<NME> linux-syslog
<BEF> ADDFILE
<MSG> - capture pid in SYSLOGPROG
- add some linux-syslog patterns
- sample config for linux-syslog


<DFF> @@ -0,0 +1,2 @@
+SYSLOGPAMSESSION %{SYSLOGBASE} (?=%{GREEDYDATA:message})%{WORD:pam_module}\(%{DATA:pam_caller}\): session %{WORD:pam_session_state} for user %{USERNAME:username}(?: by %{GREEDYDATA:pam_by})?
+SYSLOGLINE %{SYSLOGBASE} %{GREEDYDATA:message}

- capture pid in SYSLOGPROG - add some linux-syslog patterns - sample config for linux-syslog