Community Patterns

Community Library Entry

1

Regular Expression
Created·2016-07-11 17:46
Flavor·PCRE (Legacy)

/
(.*Request.*\[(?P<req_ip>.*)\:.*\].*GZIP)\n(.*)\n(.*)\n(.*Play.*\'(?P<watched>.*)\'.*)\n(.*User is\s(?P<who>.*)\s\(.*)\n(.*Device is(?P<device>.*)\.)\n(.*)\n(.*Completed.*\=(?P<movie_time>\d+)\&k.*\&time\=(?P<played_time>\d+)\s\(.*)
/
g
Open regex in editor

Description

Grab multiple events with various fields from plex media logs to see who watched what and when from where. Using for splunk dashboard.

Submitted by sydvishus