diff --git a/fail2ban/tests/files/logs/screenshare b/fail2ban/tests/files/logs/screenshare
index d3736f82..73425b43 100644
--- a/fail2ban/tests/files/logs/screenshare
+++ b/fail2ban/tests/files/logs/screenshare
@@ -1,5 +1,14 @@
+# failJSON: { "time": "Oct 27 09:24:46", "match": false , "host": "192.168.5.247" }
 Oct 27 09:24:46 test1.beezwax.net screensharingd[1170]: Authentication: SUCCEEDED :: User Name: simon :: Viewer Address: 192.168.5.247 :: Type: DH
+# failJSON: { "time": "Oct 27 09:25:41", "match": true , "host": "192.168.5.247" }
 Oct 27 09:25:41 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: sdfsdfs () mro :: Viewer Address: 192.168.5.247 :: Type: DH
+# failJSON: { "time": "Oct 27 09:25:49", "match": true , "host": "192.168.5.247" }
 Oct 27 09:25:49 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: sdfsdfs :: :: Viewer Address: 192.168.5.247 :: Type: DH
-Oct 27 09:25:58 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: sdfsdfs _+ :: Viewer Address: 192.168.5.247 :: Type: DH
+# failJSON: { "time": "Oct 27 09:26:09", "match": true , "host": "192.168.5.247" }
 Oct 27 09:26:09 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: sdfsdfs @! s:: :: Viewer Address: 192.168.5.247 :: Type: DH
+# failJSON: { "time": "Oct 27 09:23:20", "match": false , "host": "192.168.5.247" }
+Oct 27 09:23:20 fm100 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.SecurityAgent.1156): Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAgent.xpc
+# failJSON: { "time": "Oct 27 09:23:20", "match": false , "host": "192.168.5.247" }
+Oct 27 09:23:20 fm100.beezwax.net ManagedClient[1155]: MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=1027), NULL) failed
+# failJSON: { "time": "Oct 27 12:26:44", "match": false , "host": "192.168.5.247" }
+Oct 27 12:26:44 fm100.beezwax.net digest-service[3828]: digest-request: kdc failed with 36150275 proto=unknown