regex to extract fields

[shugup2923]

My message field look likes below
Message=network share object was checked to see whether client can be granted desired access. Subject: Security ID: EMEA\xxxx.xxxxxx Account Name: xxxx.xxxxxxx Account Domain: EMEA Logon ID: xxxxxxxxxx Network Information: Object Type: File Source Address: xx.xx.xx.xxx Source Port: xxxxx Share Information: Share Name: \*\XX_XX_6_1

I need regex for extracting Security ID, Account Name , Account Domain from this fields,

[jpolvino]

Here is one way to do it:

(your search)
| rex "Security ID: (?<security_id>[\S]+) Account Name: (?<account_name>[\S]+) Account Domain: (?<account_domain>[\S]+)"

See regex101: https://regex101.com/r/IJr8wm/1