From 48c094f6125665dc17b2c7a6e51a928ef6eb9b86 Mon Sep 17 00:00:00 2001
From: Andrii Melnyk <gipson.ukr@gmail.com>
Date: Fri, 8 Jul 2016 13:45:10 +0300
Subject: [PATCH] improved failregex according to @sebres recomendations

---
 config/filter.d/slapd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/filter.d/slapd.conf b/config/filter.d/slapd.conf
index 0af6a4ea..23d9ee2d 100644
--- a/config/filter.d/slapd.conf
+++ b/config/filter.d/slapd.conf
@@ -13,7 +13,7 @@ before = common.conf
 
 _daemon = slapd
 
-failregex = ^(?P<__prefix>%(__prefix_line)s).* conn=(?P<pid>\d+) fd=\d+ ACCEPT from IP=<HOST>\:\d+ .+$<SKIPLINES>(?P=__prefix).+ conn=(?P=pid) .* RESULT .* err=49 .*$
+failregex = ^(?P<__prefix>%(__prefix_line)s)conn=(?P<_conn_>\d+) fd=\d+ ACCEPT from IP=<HOST>[^\n]+<SKIPLINES>(?P=__prefix)conn=(?P=_conn_) op=\d+ RESULT(?:\s(?!err)\S+=\S*)* err=49\s
 
 ignoreregex =