^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su: pam_unix\(su-l:session\): session opened for user email-reminder by \(uid=0\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su: pam_unix\(su-l:session\): session closed for user email-reminder$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ systemd: pam_unix\(systemd-user:session\): session opened for user email-reminder by \(uid=0\)$
