diff --git a/playbooks/files/system/base/logs/all b/playbooks/files/system/base/logs/all
index 4b32e31..eaad963 100644
--- a/playbooks/files/system/base/logs/all
+++ b/playbooks/files/system/base/logs/all
@@ -3,3 +3,4 @@
 ^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd\[[0-9]+\]: Finished (Cleanup of Temporary Directories|Online ext4 Metadata Check for All Filesystems|Discard unused blocks on filesystems from /etc/fstab)\.$
 ^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd\[[0-9]+\]: (apt-daily\.service|apt-daily-upgrade\.service|logrotate\.service|man-db\.service): Consumed ([0-9]{1,2}min )?[0-9]{1,2}\.[0-9]{3}s CPU time\.$
 ^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd\[[0-9]+\]: rsyslog\.service: Sent signal SIGHUP to main process [[:digit:]]+ \(rsyslogd\) on client request\.$
+^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ rsyslogd(\[[0-9]+\])?: \[origin software="rsyslogd" swVersion="[0-9]+\.[0-9]+\.[0-9]+" x-pid="[0-9]+" x-info="https:\/\/www\.rsyslog\.com"\] rsyslogd was HUPed$