Here is one possibility that might help you. This one discusses how to do multiline regex's in compliance rules a bit, which I use for some ACL's depending on the length.
NCM Regex to find if deny any is present for each ACL
If not that, you might look at the solution I gave for this problem. You should be able to accomplish what you want with the "lookbehind buffer" in regex's. Your regex might get complicated depending on the complexity of the ACL, but it should work...
Filtering for incorrect logging hosts
Let me know what path you take!