From ab0847e2d59611dd81e2f6a1dd30c1f136dce958 Mon Sep 17 00:00:00 2001
From: "Sergey G. Brester" <serg.brester@sebres.de>
Date: Wed, 14 Apr 2021 13:06:58 +0200
Subject: [PATCH] more precise anchored RE (also combining all 3 REs in a
 single regex)

---
 config/filter.d/monitorix.conf | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/config/filter.d/monitorix.conf b/config/filter.d/monitorix.conf
index 3979ed43a..ff69f1bc5 100644
--- a/config/filter.d/monitorix.conf
+++ b/config/filter.d/monitorix.conf
@@ -16,9 +16,7 @@ _daemon = monitorix-httpd
 #          (?:::f{4,6}:)?(?P<host>\S+)
 # Values:  TEXT
 #
-failregex = NOTEXIST - \[<HOST>\] .*
-            AUTHERR - \[<HOST>\] .*
-            NOTALLOWED - \[<HOST>\] .*
+failregex = ^(?:\s+-)?\s*(?:NOTEXIST|AUTHERR|NOTALLOWED) - <ADDR>\b
 
 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.