^[-:T.+0-9]+ [._[:alnum:]-]+ smbd_audit: [[:alnum:]]+\|[[:alnum:]]+\|[.[:digit:]]{7,15}\|[[:alnum:][:space:]]+\|.+$
^[-:T.+0-9]+ [._[:alnum:]-]+ smbd_audit: [[:alnum:]]+\|[[:alnum:]]+\|[.[:digit:]]{7,15}\|[[:alnum:][:space:]]+\|.+$
