^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ login\[[0-9]+\]: '[[:alnum:]-]+' logged in  on '/dev/tty[0-9]'$
