From 39ca8837eb7523dbc4d2a94ba4bf336e3c3fb433 Mon Sep 17 00:00:00 2001
From: Daniel Black <grooverdan@users.sourceforge.net>
Date: Tue, 17 Sep 2013 22:24:56 +1000
Subject: [PATCH] TST: pureftpd - syslog therefore use syslog prefixes in
 filter

---
 config/filter.d/pure-ftpd.conf | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/config/filter.d/pure-ftpd.conf b/config/filter.d/pure-ftpd.conf
index de46461d..2f910b8a 100644
--- a/config/filter.d/pure-ftpd.conf
+++ b/config/filter.d/pure-ftpd.conf
@@ -4,6 +4,9 @@
 # Modified: Yaroslav Halchenko for pure-ftpd
 #
 #
+[INCLUDES]
+
+before = common.conf
 
 [Definition]
 
@@ -18,7 +21,10 @@ __errmsg = (?:Authentication failed for user|Erreur d'authentification pour l'ut
 #         (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
 # Values: TEXT
 #
-failregex = pure-ftpd(?:\[\d+\])?: \(.+?@<HOST>\) \[WARNING\] %(__errmsg)s \[.+\]\s*$
+#
+_daemon = pure-ftpd
+
+failregex = ^%(__prefix_line)s\(.+?@<HOST>\) \[WARNING\] %(__errmsg)s \[.+\]\s*$
 
 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.