#2014-09-22T11:20:42.905562+01:00 proxy usermod[10709]: change user 'ciistadmin' password
#2014-09-22T11:20:43.347367+01:00 proxy usermod[10715]: lock user 'ciistadmin' password
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ usermod\[[0-9]+\]: change user 'ciistadmin' password$
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ usermod\[[0-9]+\]: lock user 'ciistadmin' password$
