^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ rpc\.mountd\[[[:digit:]]+\]: authenticated (un|)mount request from [._[:alnum:]-]+:[0-9]+ for .+ \(.+\)$
