I had the same issue. Sometime between 4.2 and 4.2.2, whitelist has seemingly been changed to match the entire path, not just the filename. This means the the "^" anchor prevents "/var/log/messages" being matched, so if you change the regex to be something like:
whitelist=(\.log|log$|\/messages|\/secure|mesg$|cron$|acpid$|\.out)
(i.e. match a filename containing "/messages")
it should work.
If you're being pedantic, then you may notice this will also match something like:
/var/log/someapp/messages/not_a_logfile
So if you're worried about that then you could use the following pattern to match exactly the files that would have been matched previously:
whitelist=(\.log|log$|\/messages[^\/]*$|\/secure[^\/]*$|mesg$|cron$|acpid$|\.out)
(i.e. a filename beginning with "messages").
... View more