diff --git a/nlog b/nlog
index 72406bf..1991fe2 100755
--- a/nlog
+++ b/nlog
@@ -119,7 +119,7 @@ fi
 timeSub=""
 [ -z "$noTime" ] && timeSub="&& sub (/^\[[0-9]{10}]/, strftime (\"%Y-%m-%d %H:%M:%S\", substr (\$1, 2, 10)), \$1)"
 
-awkString="/^\[[0-9]{10}] (GLOBAL |CURRENT )?$aSource (DOWNTIME |FLAPPING )?$aType: .*$host.*$service/"
+awkString="/^\[[0-9]{10}] (GLOBAL |CURRENT )?$aSource[^ ]* (DOWNTIME |FLAPPING )?$aType[^:]*: .*$host.*$service/"
 [ -n "$raw" ] && awkString="/./"
 do_debug "host=$host"
 do_debug "service=$service"