Can I say for example [linux] log:/var/log/messages:102400 ignore nslcd ignore MARK ignore %.*be2net.* or do those all have to be one regexp? (and can I say "ignore nslcd" or does it have to be "ignore %.*nslcd.* " ?