Regex to extract words in red?

[KhalidSheikh]

While processing an AS request for target service krbtgt, the account XXX-G-Dashboard-Dev did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 1). The requested etypes : 18 17 3. The accounts available etypes : 23. Changing or resetting the password of XXX-G-Dashboard-Dev will generate a proper key.

What is the regex to extract words in red? Thanks.

[ITWhisperer · Accepted solution]

| rex "(?<service>krbtgt)"
| rex "(?<account>XXX-G-Dashboard-Dev)"

[richgalloway]

This should do, at least with the sample event.

| rex "target service (?<targetService>[^,]+), the account (?<account>\S+)"