^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (sslh|sslh-select)\[[[:digit:]]+\]: connection from [^[:space:]]+:[^[:space:]]+ to [^[:space:]]+:[^[:space:]]+ forwarded from [^[:space:]]+:[^[:space:]]+ to [^[:space:]]+:(https|ssh|openvpn)$
