.any character (except for line terminators)
\w+any word character, repeated at least once
\W+any non-word character, repeated at least once
Group EventTime(?<EventTime>[^"]+) Negated Character Class[^"]+ +matches at least one character outside the set below:
"the literal " (3410 / 428 / 2216)
\W+any non-word character, repeated at least once
\w+any word character, repeated at least once
\W+any non-word character, repeated at least once
Group HostName(?<HostName>\w+) \w+any word character, repeated at least once
.+?any character (except for line terminators), repeated at least once
EventIDthe literal text EventID (case sensitive) \W+any non-word character, repeated at least once
Group EventID(?<EventID>\w+) \w+any word character, repeated at least once
.+?any character (except for line terminators), repeated at least once
Messagethe literal text Message (case sensitive) \W+any non-word character, repeated at least once
Group Message(?<Message>[^"]+) Negated Character Class[^"]+ +matches at least one character outside the set below:
"the literal " (3410 / 428 / 2216)
.+any character (except for line terminators), repeated at least once