Regular Expressions 101

Library entries

PasswordState Failed User Logon

Vote

1

Regular Expression
pcre

/
<AUDT:INFO>.(?<date>\d+.\d+.\d+) (?:\d+:\d+:\d+) (?:\d+.\d+.\d+.\d+) (?:.*(?<subject>Failed 'Active Directory' login attempt)(?:.\w+.\w+)(?<impacteduser>.*?'\W))\w+.\w+.\w+.\w+.'(?<sip>.\d+.\d+.\d+.\d+)'
/
gm

Description

Loading markdown...
Submitted by mh - a year ago