...
# multipathd: checker failed nur senden, wenn innerhalb von 30 Sekunden kein
# multipathd:  reinstated kommt
reg+        = %t %h multipathd:|%t %h kernel: device-mapper: multipath:
iformat     = %t %h
regsplit    = multipathd: ((checker failed path ([0-9][^ ]*) in map .*)|(([0-9].*): reinstated))
splitvars   = %s %1 %2 %s %-2
consolidate = 30sF
test        = %{2,DIST} > 0
write       = V;%F %T;%h;System;Logfileadapter;Log;"multipathd: %{1,FIRST}";_;all
...