I had the same issue with the "statement" extraction. After hours of trial and error, I found the magic regex:
...| rex field=_raw "statement:(?[^^$]+)additional" | ...
[^^$] match anything that is not an empty line
+ match multiple times
Give it a try!
... View more