From ea491c4a068c9addb71b15b8b7f7f264776fcf42 Mon Sep 17 00:00:00 2001
From: Tony Murray <murraytony@gmail.com>
Date: Wed, 2 Mar 2016 23:48:07 -0600
Subject: [PATCH] move the negation outside of the regular expression for more
 accurate results

---
 includes/syslog.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/syslog.php b/includes/syslog.php
index 8d6a902c43..0c8ade0cd4 100644
--- a/includes/syslog.php
+++ b/includes/syslog.php
@@ -67,7 +67,7 @@ function process_syslog($entry, $update) {
             }
             else {
                 // if this looks like a program (no groups of 2 or more lowercase letters), move it to program
-                if (preg_match('/[^(a-z)]{2,}/', $entry['msg'])) {
+                if (!preg_match('/[(a-z)]{2,}/', $entry['msg'])) {
                     $entry['program'] = $entry['msg'];
                     unset($entry['msg']);
                }