Thank your for sharing your file. I tried the supplied file [1] with the command
$ egrep -f ./local-systemd /var/log/syslog but it matches all lines of syslog because the file contains empty lines. I removed them and it worked. Attached my modfied file. [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=808429;filename=systemd.logcheck;msg=5
local-systemd
Description: Binary data
pgpyaB7f06lB1.pgp
Description: Digitale Signatur von OpenPGP
