diff --git a/modules/journalwatch.nix b/modules/journalwatch.nix
index 7b5ce5e..74bb1e1 100644
--- a/modules/journalwatch.nix
+++ b/modules/journalwatch.nix
@@ -124,7 +124,7 @@
       }
       { # yodaNas
         filters = ''
-          crond: USER root pid   [0-9]+ cmd wget -qO- http://money.p1st.de:8080/api/v1/cron/\S+ > /proc/1/fd/1 2>/proc/1/fd/2
+          crond: USER root pid   [0-9]+ cmd wget -qO- http://money\.p1st\.de:8080/api/v1/cron/\S+ > /proc/1/fd/1 2>/proc/1/fd/2
         '';
         match = "IMAGE_NAME = busybox";
       }
@@ -152,7 +152,7 @@
           # Somebody evil connected with a non-SSH client to the SSH server.
           error: kex_exchange_identification: banner line contains invalid characters
           # Somebody evil ...
-          error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
+          error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1\.1"
           error: kex_exchange_identification: Connection closed by remote host
           error: PAM: Authentication failure for \S+ from \S+
           fatal: Timeout before authentication for \S+ port [0-9]+
@@ -228,8 +228,8 @@
       }
       { # yodaYoga
         filters = ''
-          \S+.(service|scope): Consumed .+ CPU time, read .+ from disk, written .+ to disk.+
-          \S+.(service|scope): Consumed .+ CPU time, received .+ IP traffic, sent .+ IP traffic\.
+          \S+\.(service|scope): Consumed .+ CPU time, read .+ from disk, written .+ to disk.+
+          \S+\.(service|scope): Consumed .+ CPU time, received .+ IP traffic, sent .+ IP traffic\.
           #
           Shutting down\.
         '';
@@ -256,7 +256,7 @@
           # Ignore.
           audit: type=2000 audit([0-9]+\.[0-9]+:[0-9]+): state=initialized audit_enabled=0 res=1
           ENERGY_PERF_BIAS: Set to 'normal', was 'performance'
-          Kernel command line: initrd=\\efi\\nixos\\\S+-initrd-linux-\S+-initrd\.efi init=/nix/store/\S+-nixos-system-\S+-[0-9]+.[0-9]+pre-git/init ip=dhcp loglevel=[0-9]
+          Kernel command line: initrd=\\efi\\nixos\\\S+-initrd-linux-\S+-initrd\.efi init=/nix/store/\S+-nixos-system-\S+-[0-9]+\.[0-9]+pre-git/init ip=dhcp loglevel=[0-9]
           Linux version \S+ \(nixbld@localhost\) \(gcc \(GCC\) \S+, GNU ld \(GNU Binutils\) \S+\) #1-NixOS SMP PREEMPT_DYNAMIC \S+ \S+ \S+ \S+ UTC \S+
           random: crng reseeded on system resumption
           random: crng init done
@@ -277,7 +277,7 @@
           Initialise system trusted keyrings
           Key type asymmetric registered
           Asymmetric key parser 'x509' registered
-          Loading compiled-in X.509 certificates
+          Loading compiled-in X\.509 certificates
           Key type \.fscrypt registered
           Key type fscrypt-provisioning registered
           Key type encrypted registered