Yea, the beginning of the line is usually sufficient. Of course, if you want to anchor at the end with a possible log, you could do it with '^\s+deny\s+any(| log)\r\n' I believe.
You have to love regular expressions, don't have to understand them at all, but ya have to love them!! Kind of like women in that respect!!!