Community Patterns

Community Library Entry

0

Regular Expression
Created·2021-11-11 11:23
Updated·2021-11-11 11:26
Flavor·PCRE2 (PHP)

/
^(?P<dst_ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})?,?(?P<User>[a-zA-Z._\d]+),(?P<src_ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):(?<ID>\d+)
/
gm
Open regex in editor

Description

This regular expression can be used in SIEM or scripts to extract special fields such as:

Submitted by EskiSlav