The text e762cf8db23a, as Debian 7 (Wheezy) shipped it.
use regular expression search rule
ausearch_add_regex(3) on Linux now
