^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ su(\[[0-9]+\])?: \(pam_[[:alnum:]]+\) .*$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ su(\[[0-9]+\])?: .*$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ su(\[[0-9]+\])?: \+ pts/[0-9]+ [[:alnum:]]+[-:]root$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ su(\[[0-9]+\])?: \+ \?\?\? root[-:][[:alnum:]]+$
