Customer Self-Service Portal

Windows Event Logs groupby Account name

in Windows Event Logs, the Account Name is in the message and is not considered a variable. how can I make a "search" to have a result with the Account Name ?
logtype="Windows Event Logs" and eventid="4625" and type CONTAINS "Security" groupby Account Name
Thanks for your help.