^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ microbackup: NSFCopy .+, written at .+ by .+$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ sudo:     root : TTY=unknown ; PWD=/ ; USER=notes ; COMMAND=/bin/sh