For reasons I cannot explain yet... The field extraction for Event_Description will not work if the word Malicious is right after Web Attack. Any help would be appreciated.