UserID Windows Agent from syslog flow

A good site to test the regex : https://regexr.com/

Event Regex: ‘An account was successfully logged on.’
Username Regex: ‘Account Name: ([^-][a-zA-Z0-9-\._]+) ‘

( this takes out the machines as they finish by $
Address Regex: ‘Source Network Address: ([0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3})’