diff --git a/benchmarks/logging-and-auditing/2.15-ensure-rsyslog-is-configured-to-send-logs-to-a-remote-log-host.md b/benchmarks/logging-and-auditing/2.15-ensure-rsyslog-is-configured-to-send-logs-to-a-remote-log-host.md
index 9655c02d132669e186db528d28c33507237d4457..bade3ffb81b62c856c65c67b8e63bc1bf65f1e73 100644
--- a/benchmarks/logging-and-auditing/2.15-ensure-rsyslog-is-configured-to-send-logs-to-a-remote-log-host.md
+++ b/benchmarks/logging-and-auditing/2.15-ensure-rsyslog-is-configured-to-send-logs-to-a-remote-log-host.md
@@ -31,7 +31,7 @@ rsyslog 工具支持将其收集的日志发送到运行 syslogd(8) 的远程日
 1. 运行以下命令，检查`/etc/rsyslog.conf`和`/etc/rsyslog.d/*.conf`文件是否正确配置了远程日志主机(其中 loghost.example.com 是您的中央日志主机的名称，根据实际情况进行修改。)：
 
 ```bash
-# grep "^*.*[^I][^I]*@" /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+# grep -E "^\*\.\*\s+(@){1,2}.*" /etc/rsyslog.conf /etc/rsyslog.d/*.conf
 *.* @@loghost.example.com
 ```