From 9a82bc3c617c488dd376571370d08b05bf1954af Mon Sep 17 00:00:00 2001
From: Daniel Black <grooverdan@users.sourceforge.net>
Date: Sun, 24 Nov 2013 18:21:02 +1100
Subject: [PATCH] BF: kernel messages can have space. Thanks ag4ve(shawn).
 Closes #448

---
 ChangeLog                   | 1 +
 THANKS                      | 1 +
 config/filter.d/common.conf | 2 +-
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 24f01e9a..6636ef76 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -15,6 +15,7 @@ ver. 0.8.12 (2013/12/XX) - things-can-only-get-better
 - Fixes:
   - allow for ",milliseconds" in the custom date format of proftpd.log
   - allow for ", referer ..." in apache-* filter for apache error logs.
+  - allow for spaces at the beginning of kernel messages. Closes gh-448
 
 - New Features:
 
diff --git a/THANKS b/THANKS
index 46c7bc5e..e71eefea 100644
--- a/THANKS
+++ b/THANKS
@@ -8,6 +8,7 @@ be added
 
 Adrien Clerc
 ache
+ag4ve (Shawn)
 Amir Caspi
 Andrey G. Grozin
 Andy Fragen
diff --git a/config/filter.d/common.conf b/config/filter.d/common.conf
index b992e4b8..ae8e8b7b 100644
--- a/config/filter.d/common.conf
+++ b/config/filter.d/common.conf
@@ -34,7 +34,7 @@ __daemon_combs_re = (?:%(__pid_re)s?:\s+%(__daemon_re)s|%(__daemon_re)s%(__pid_r
 
 # Some messages have a kernel prefix with a timestamp
 # EXAMPLES: kernel: [769570.846956]
-__kernel_prefix = kernel: \[\d+\.\d+\]
+__kernel_prefix = kernel: \[ *\d+\.\d+\]
 
 __hostname = \S+