r"
(?P<time>\w{3}\s+\d{1,2}\s\d{2}:\d{2}:\d{2})\s(?P<src>\w*)\s.*action=(?P<action>\w*).*severity=(?P<severity>\w*).*policies=(?P<policies>\w*).*source=(?P<username>\w* \w*).*destinations=(?P<destinations>\w*\@\w*\.\w*).*channel=(?P<channel>\w*).*matches=(?P<matches>\d{1,5}).*details=(?P<details>\w*)
"
g