This issue is resolved in vRealize Log Insight 4.6.1 and higher, available at
VMware Downloads.
Workaround:
To work around this issue, update the extracted field by replacing all spaces, tabs and new lines with "\s*" in the pre and post contexts
Example:
pre: Failure Code:\s*
post: \s*Pre\-Authentication