Regular Expressions 101

Community Patterns

For Splunk

0

Regular Expression
PCRE (PHP <7.3)

/
[\s\S]{25}(?<log_level>\w+ \d).---.\[Thread-(?<thread_id>\d+)][\s\S]{42}(?(?=: debug1): (?<internal_log_level>\w+)): (?(?=(?:.*?): )(?<module>.*?): )(?<message>.*)
/
gm

Description

Parses log data

Submitted by anonymous - 4 years ago