From 7a03c964c29fe3f13c3993d98ff77b6e958885f5 Mon Sep 17 00:00:00 2001
From: "Serg G. Brester" <github@sebres.de>
Date: Tue, 21 Mar 2017 14:04:18 +0100
Subject: [PATCH] Update ChangeLog

---
 ChangeLog | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 5c1ba70e..7629fb2f 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -41,9 +41,13 @@ TODO: implementing of options resp. other tasks from PR #1346
   using single-line expressions:
   - tag `<F-MLFID>`: used to identify resp. store failure info for groups of log-lines with the same
     identifier (e. g. combined failure-info for the same conn-id by `<F-MLFID>(?:conn-id)</F-MLFID>`,
-    see sshd.conf for example)
+    see sshd.conf for example);
+  - tag `<F-MLFFORGET>`: can be used as mark to forget current multi-line MLFID (e. g. by connection 
+    closed, reset or disconnect etc);
   - tag `<F-NOFAIL>`: used as mark for no-failure (helper to accumulate common failure-info, 
     e. g. from lines that contain IP-address);
+  Opposite to obsolete multi-line parsing (using buffering with `maxlines`) it is more precise and 
+  can recognize multiple failure attempts within the same connection (MLFID).
 * Several filters optimized with pre-filtering using new option `prefregex`, and multiline filter 
   using `<F-MLFID>` + `<F-NOFAIL>` combination;
 * Exposes filter group captures in actions (non-recursive interpolation of tags `<F-...>`,