...
XPLG:[{timestamp:Timestamp,MM/dd/yyyy HH:mm:ss.SSS}] [{text:Facility}] [{priority:Level,DEBUG;INFO;WARN;ERROR;FATAL}] [{text:Source Device}] {block,start,emptiness=true}{text:Application Name}[{text:Process Id}]: {block,end,emptiness=true}{block,start,emptiness=true}{text} {text:Process,ftype=eventSource;,}:{block,end,emptiness=true}{regexp:User,ftype=username;refName=Message,user=(\S+)}{regexp:Partition,refName=Message,partition=(\S+)}{regexp:Level,refName=Message,level=(\S+)}{regexp:tty,refName=Message,tty=(\S+)}{regexp:host,ftype=sourceip;refName=Message,host=(\S+)}{regexp:attempts,ftype=loginAttempts;refName=Message,attempts=(\S+)}{regexp:pid,refName=Message,pid=(\S+)}{regexp:folder,refName=Message,folder=(\S+)}{regexp:status,ftype=status;refName=Message,status=\[([^:|/]]*(Command OK |Syntax Error)}{regexp:Error,ftype=message;refName=Message,Syntax Error: ([^/]]*)}{regexp:cmd_data,ftype=eventName;refName=Message,cmd_data=(\S+)}{regexp:start,ftype=loginStart;refName=Message,start="([^"]*)}{regexp:end,ftype=loginEnd;refName=Message,end="([^"]*)}{string:Message}
...