(raslogd)(?:[A-Z0-9:\s\/\,\s\-\(\)]*\,\s)(?:\[)(?:[A-Z0-9\-]*)(?:\]\,\s)(?:[A-Z]*)(?:[0-9]*)(?:\,\s)(?:[A-Z]*\s)(?:[0-9a-z:]*)(?:\s\|\s[A-Z]*\s)(?:[0-9]*)(?:\,\s[A-Z]*\,\s)([a-zA-Z0-9\-]*)(?:\,\s)(?:[A-Za-z\:\/\s]*)(Login\sfailure)(?:[A-Za-z\:\/\s]*via\s)(.*)(?:\.)(?:\s)(?:IP\sAddr\:\s)([0-9\.]*)