Regex used in Splunk to extract fields from Mikrotik FW. NOTES: Mikrotik must be configured to use "BSD Syslog" format FW rules must add, as log prefix, the action: drop accep...

Matches any telephone number with region parentesis, or separated by points or dash or spaces

gutoregex

preg_math_all only. ex.: http://doman.com, http://doman.com/, http://doman.com/?query=1,http://doman.com?query=1, domain.com, doman.com?query=1 and other

Find all BR tags in a string

This matches a ASP Cookieless SessionId. Useful if, for example, after deprecating Cookieless sessions you want to redirect any clients with a cached sessionId to the plain url.

Telephone number can come with extra characters to denote country, region, etc

\_\d(.+) for _2015041122

2010-2012

acepts 1.000 and 1000

There are 2 segments within this data that start with REF* and end with a tilde (~). I can capture one of them but not both. I've read and cant seem to figure this one out. I DO need to preface with the NM1*03 piece.