[michaelmior]

> Normal entries are entries which match one of the many included regular expression files contain in the database.

I haven't used logcheck, but I assume you can add your own regexes, but looks like you have something to start with.

[jlgaddis]

It ships with a ton of "rules" [0]. You can choose to use just those, just your own, or some or all of both.

[0]: https://salsa.debian.org/debian/logcheck/tree/master/rulefil...