fixed the regex so that it conforms to the generic access_log format, and not the custom log format of the last place I worked;
I should think of some way to make this more flexible, perhaps with some more modular semantics (I think I'll call it "Splunk" - j/k);