slightly better regex for s3 logs