[TNM] can't understand why this line is matching

[Douglas J Hunley]

given my tail_n_mail.conf of:
## Config file for the tail_n_mail program
## This file is automatically updated
## Last updated: Wed Aug 22 10:15:51 2018
LOG_LINE_PREFIX: %t [%p]: [%l-1] user=%u,db=%d,app=%a,client=%h
EMAIL: doug.hunley at gmail.com
MAILSUBJECT: HOST Postgres errors NUMBER

INCLUDE: ERROR:
INCLUDE: FATAL:
INCLUDE: PANIC:



FILE1: /Users/doug/repos/postgres/pgenv/pgsql/data/log/postgresql-%a.log
LASTFILE1:
/Users/doug/repos/postgres/pgenv/pgsql/data/log/postgresql-Wed.log
ROTATEFILEMODTIME1:
OFFSET1: 74140

Why did I receive the following email:
Date: Wed Aug 22 10:02:00 2018 EDT
Host: ReturnOfTheMac.local
Unique items: 1
Matches from
/Users/doug/repos/postgres/pgenv/pgsql/data/log/postgresql-Wed.log: 1


[1] (from lines 23 - 26)
2018-08-22 09:58:08.971 P00   INFO: archive-push command begin 2.04:
[pg_xlog/000000010000000000000048] --archive-async --no-compress
--log-level-console=info
--pg1-path=/Users/doug/repos/postgres/pgenv/pgsql/data --process-max=4
--repo1-path=/Volumes/Google/Backups/db --repo1-type=cifs --stanza=9.6.9
2018-08-22 09:58:10.991 P00   INFO: pushed WAL segment
000000010000000000000048 asynchronously
20
[LINE TRUNCATED, original was 491 characters long]



Is it because pgbackrest doesn't use the same log_line_prefix as Pg? I even
tried adding 'EXCLUDE: INFO:' and it still matched that line. This is
latest tail_n_mail from homebrew.
Thanks
-- 
{
  "name": "douglas j hunley",
  "email": "doug.hunley at gmail.com",
  "social": [
    {
        "blog": "https://hunleyd.github.io/",
        "twitter": "@hunleyd"
    }
   ]
}
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.endcrypt.com/pipermail/tnm/attachments/20180822/b05711b9/attachment.html>