Value ACL_NAME (\S+)
Value ACL_TOT_ELEM (\d+)
Value ACL_NAME_HASH (0x\w+)
Value USER (\S+)
Value REMARK (.+?)
Value USER_GROUP (\S+)
Value SRC_SERVICE (\S+)               
Value TYPE (standard|extended)                
Value LINE_NUM (\d+)                                                                                                                                                                                                                                                                                                                                                                                                                                
Value ACTION (permit|deny)                                            
Value PROTOCOL ([a-z0-9]+)
Value SOURCE (\S+)
Value ACE_STATE (inactive)
Value SVC_OBJECT_GRP (\S+)                                                                                                                  
Value SVC_OBJECT (\S+)                                                                                                                      
Value SRC_INTFC (\S+)                                                                                                                       
Value SRC_OBJECT_GRP (\S+) 
Value SECURITY_GROUP (\S+)
Value SRC_OBJECT (\S+)                                                                                                                      
Value SRC_HOST (\d+\.\d+\.\d+\.\d+)                                                                                                         
Value SRC_V6HOST ([0-9a-f:]+)                                                                                                               
Value SRC_NETWORK (\d+\.\d+\.\d+\.\d+)                                                                                                      
Value SRC_V6NETWORK ([0-9a-f:]+)                                                                                                            
Value SRC_MASK (\d+\.\d+\.\d+\.\d+)                                                                                                         
Value SRC_V6MASK (\d{1,3})                                                                                                                 
Value SRC_ANY (any[46]{0,1})          
Value DST_INTFC (\S+)                                                                                                                       
Value DST_OBJECT_GRP (\S+)                                                                                                                  
Value DST_OBJECT (\S+)                                                                                                                      
Value DST_HOST (\d+\.\d+\.\d+\.\d+)                                                                                                         
Value DST_V6HOST ([0-9a-f:]+)                                                                                                               
Value DST_NETWORK (\d+\.\d+\.\d+\.\d+)                                                                                                      
Value DST_V6NETWORK ([0-9a-f:]+)                                                                                                            
Value DST_MASK (\d+\.\d+\.\d+\.\d+)                                                                                                         
Value DST_V6MASK (\d{1,3})                                                                                                                  
Value DST_ANY (any[46]{0,1})                                                                                                                
Value DST_PORT (\S+)                                                                                                                        
Value DST_PORT_LESS_THAN (\S+)                                                                                                              
Value DST_PORT_GREATER_THAN (\S+)                                                                                                           
Value DST_PORT_RANGE_START (\S+)                                                                                                            
Value DST_PORT_RANGE_END (\S+)                                                                                                              
Value DST_PORT_GRP ($services_groups)                                                                                                                    
Value DST_PORT_OBJECT (\S+)                                                                                                                 
Value DST_ICMP_TYPE ((?!log|time|inactive)\S+)
Value SRC_SECURITY_GROUP (\S+)
Value SRC_SECURITY_GROUP_NAME (\S+)
Value DST_SECURITY_GROUP_NAME (\S+)
Value DST_SECURITY_GROUP (\S+)
Value SRC_SECURITY_GROUP_TAG (\S+)
Value DST_SECURITY_GROUP_TAG (\S+)
Value HIT_COUNT (\d+)
Value LINE_HASH (0x\w+)
Value DST_SERVICE (\S+)
Value LOG_LEVEL ([a-z0-9]+)
Value LOG_INTERVAL (\d+)
Value TIME_RANGE (\S+)
Value ENTRY_PORT ([a-z\-]+\s+\d+|[\w\-]+)
Value ENTRY_PORT_LESS_THAN ([a-z\-]+\s+\d+|\w+)
Value ENTRY_PORT_GREATER_THAN ([a-z\-]+\s+\d+|\w+)
Value ENTRY_PORT_RANGE_START ([a-z\-]+\s+\d+|\w+)
Value ENTRY_PORT_RANGE_END ([a-z\-]+\s+\d+|\w+)
Value ICMP_KEY_VALUE (alternate-address|conversion-error|echo|echo-reply|information-reply|information-request|mask-reply|mask-request|mobile-redirect|parameter-problem|redirect|router-advertisement|router-solicitation|source-quench|time-exceeded|timestamp-reply|timestamp-request|traceroute|unreachable|\d{1,3})
Value ICMP_VALUE (\d+)
Value SRC_SERVICE_OBJECT_GROUP (\S+)
Value SRC_PORT (\S+)
Value SRC_PORT_LESS_THAN (\S+)
Value SRC_PORT_GREATER_THAN (\S+)
Value SRC_PORT_RANGE_START (\S+)
Value SRC_PORT_RANGE_END (\S+)
Value SRC_PORT_GRP (\S+)
Value SRC_PORT_OBJECT (\S+)
Value RAW_LINE (.*)