spamd: match shutdown output
opendkim: match shutdown output
clamd: match startup output
clamav-milter: match shutdown output
arpwatch: match pid in application name
openvpn: match startup output
sshd: match new application name, add IP and method to logins
freshclam: hide output