^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su(\[[0-9]+\])?: \(pam_[[:alnum:]]+\) .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su(\[[0-9]+\])?: .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su(\[[0-9]+\])?: \+ pts/[0-9]+ [[:alnum:]]+[-:]root$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su(\[[0-9]+\])?: \+ \?\?\? root[-:][[:alnum:]]+$
