regex101: PCRE2 (PHP) Match Workspace

Pro

New Logon:the literal text New Logon: (case sensitive)

.*?any character (except for line terminators), repeated any number of times

Account Name:the literal text Account Name: (case sensitive)

\s+any whitespace character, repeated at least once

Group 1([^\s]+)

Negated Character Class[^\s]+

+matches at least one character outside the set below:

\sany whitespace character

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

25 tokens

Regular Expression

New Logon:.*?Account Name:\s+([^\s]+)

New

Opcode=Info	Message=Group membership information.  Subject:  Security ID:  \NULL SID  Account Name:  -  Account Domain:  -  Logon ID:  0x0  Logon Type:   3  New Logon:  Security ID:  MATRIZ\uxxxx4  Account Name:  uxxxx4  Account Domain:  XPTO.COM  Logon ID:  0x118C98624

Substitution

Opcode=Info	Message=Group membership information.  Subject:  Security ID:  \NULL SID  Account Name:  -  Account Domain:  -  Logon ID:  0x0  Logon Type:   3  New Logon:  Security ID:  MATRIZ\uxxxx4  Account Name:  uxxxx4  Account Domain:  XPTO.COM  Logon ID:  0x118C98624