<38>Mar 7 19:06:53: example tag: testmessage (only date actually tested)
38,auth,info,Mar  7 19:06:53,example,tag,tag:, testmessage (only date actually tested)
# colon after timestamp is strictly not ok, but we accept it
