The sources are regex, you can't match directly.

Secondly, the match should happen with actual source entries when generating the report, because regex might match the destination, but there may not be an actual account which matches the regex and hence it won't be considered a source.
Hence, the best place to do this check is while exporting.