# this ruleset clears any EVENT_PROCESSED contexts and handles # reporting of any unhandled log events. type=single desc=Clear EVENT_PROCESSED continue=dontcont ptype=regexp pattern=.? context= [ EVENT_PROCESSED ] action=delete EVENT_PROCESSED type=single desc=Catch all other lines continue=dontcont ptype=regexp pattern=.? action= write - "UNHANDLED EVENT: $0"