^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ opendmarc\[[[:digit:]]+\]: ignoring connection from .+$
^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ opendmarc\[[[:digit:]]+\]: implicit authentication service: .+$
^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ opendmarc\[[[:digit:]]+\]: [[:xdigit:]]+: .+ (fail|none|pass)$
^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ opendmarc\[[[:digit:]]+\]: [[:xdigit:]]+ ignoring Authentication-Results at [[:digit:]]+ from .+$
# Following rule isn't $-terminated; there's also an issue with matching lines from journalctl spanning multiple lines in its output
^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ opendmarc\[[[:digit:]]+\]: [[:xdigit:]]+: ignoring invalid ARC-Authentication-Results header ".+
