diff --git a/roles/epylog/files/merged/weed_local.cf b/roles/epylog/files/merged/weed_local.cf
index 8f5776ebb9..1ab4533c05 100644
--- a/roles/epylog/files/merged/weed_local.cf
+++ b/roles/epylog/files/merged/weed_local.cf
@@ -267,7 +267,7 @@ restorecond: Reset file context /var/db/shadow.db.*
 restorecond: Unable to watch.*
 Rootkit Hunter: Rootkit hunter.*
 Rootkit Hunter: Scanning.*
-rdbsync:.*
+rdbsync.*
 root: time debug:.*
 rkhunter: Rootkit hunter check started.*
 rkhunter: Scanning took.*
@@ -364,7 +364,7 @@ sshd.*: error: key_from_blob: can't parse cert data
 sshd.*: error: Could not load host certificate: /etc/ssh/ssh_host_rsa_key-cert.pub
 sshd.*: pam_systemd\(sshd:session\): Failed to create session: Failed to activate service 'org.freedesktop.login1': timed out.*
 sshd.*: Nasty PTR record.*
-stunnel:.*
+stunnel.*:.*
 su: pam_unix\(su-l:session\): session .* for user.*
 runuser: pam_unix\(runuser-l:session\).* session opened for user postgres by.*
 runuser: pam_unix\(runuser-l:session\).* session closed for user postgres
@@ -407,6 +407,14 @@ systemd.*: Cannot add dependency job for unit microcode.service.*
 systemd.*: Scope libcontainer.*has no PIDs. Refusing.
 systemd: Failed to start OpenShift Node.*
 systemd: Failed to start Origin Master Service.
+systemd.*: pam_unix\(systemd-user\:session\)\: session opened for user.*
+systemd.*: Created slice User Slice of.*
+systemd.*: Starting User Manager for UID.*
+systemd.*: Started Session.*
+systemd.*: Starting D-Bus User Message Bus Socket.
+systemd.*: Listening on D-Bus User Message Bus Socket.
+systemd.*: Startup finished in.*
+systemd.*: Started User Manager for UID.*
 supybot.*
 twistd.*
 unix_chkpwd.*: account .* has password changed in future