Regular Expressions 101

Sponsors

Library entries

1
pcre

Font Awesome Parser

no description available
Submitted by anonymous - 6 years ago
1
pcre

Font Awesome Parser

no description available
Submitted by anonymous - 6 years ago
1
pcre

date

no description available
Submitted by anonymous - 6 years ago
1
pcre

TE - Array

no description available
Submitted by anonymous - 6 years ago
1
pcre

Polls General

no description available
Submitted by anonymous - 6 years ago
1
pcre

Onclick events detector

Cut events from tags
Submitted by Romario5 - 6 years ago
1
python

a

a
Submitted by a - 6 years ago
0
pcre

filestore filename

no description available
Submitted by anonymous - 6 years ago
0
pcre

filestore directory

no description available
Submitted by anonymous - 6 years ago
1
pcre

num

no description available
Submitted by anonymous - 6 years ago
1
pcre

zero

no description available
Submitted by anonymous - 6 years ago
1
pcre

zero

no description available
Submitted by anonymous - 6 years ago
1
pcre

List open to close

List total tag
Submitted by anonymous - 6 years ago
1
pcre

Date Match

no description available
Submitted by anonymous - 6 years ago
1
pcre

Top Domain

no description available
Submitted by anonymous - 6 years ago
1
pcre

Gyproc

no description available
Submitted by anonymous - 6 years ago
1
pcre

pronouceable strings v2

no description available
Submitted by anonymous - 6 years ago
1
pcre

Catch before trailing dots

no description available
Submitted by Mehrad - 6 years ago
1
pcre

demo

no description available
Submitted by anonymous - 6 years ago

SIEM Extended Attribute Regex

Vote

1

Regular Expression
pcre

/
^.*?(?=\=)=\s"(?P<Severity>.*?(?=\"))".*?(?=Gauge32).*?(?=:):\s(?P<EventCount>\d+).*?(?=AlarmOriginEntity).*?(?=\:):\s+"(?P<OriginEntity>.*?(?=\"))".*?(?=\")"(?P<OriginHost>.*?(?=\"))".*?(?=\")"(?P<ImpactedHost>.*?(?=\"))".*?(?=\")"(?P<ImpactedApp>.*?(?=\"))".*?(?=\")"(?P<VendorMessageID>.*?(?=\"))".*?(?=\")"(?P<MPERuleName>.*?(?=\"))".*?(?=\")"(?P<EventDirection>.*?(?=\"))".*?(?=\")"(?P<OriginZone>.*?(?=\"))".*?(?=\")"(?P<ImpactedZone>.*?(?=\"))".*?(?=\")"(?P<ImpactedEntity>.*?(?=\"))".*?(?=\")"(?P<OriginLocation>.*?(?=\"))".*?(?=\")"(?P<ImpactedLocation>.*?(?=\"))".*?(?=\")"(?P<OriginNetwork>.*?(?=\"))".*?(?=\")"(?P<ImpactedNetwork>.*?(?=\"))".*?(?=\")"(?P<OriginPort>.*?(?=\"))".*?(?=\")"(?P<ImpactedPort>.*?(?=\"))".*?(?=\")"(?P<AlarmProtocol>.*?(?=\"))".*?(?=\")"(?P<OriginUser>.*?(?=\"))".*?(?=\")"(?P<ImpactedUser>.*?(?=\"))".*?(?=\")"(?P<AlarmObject>.*?(?=\"))".*?(?=\")"(?P<AlarmSender>.*?(?=\"))".*?(?=\")"(?P<AlarmRecipient>.*?(?=\"))".*?(?=\")"(?P<AlarmSubject>.*?(?=\"))".*?(?=\")"(?P<AlarmGroup>.*?(?=\"))".*?(?=\")"(?P<AlarmDomain>.*?(?=\"))".*?(?=\")"(?P<AlarmSession>.*?(?=\"))".*?(?=\")"(?P<AlarmProcessName>.*?(?=\"))".*?(?=\")"(?P<AlarmURL>.*?(?=\"))".*?(?=\")"(?P<BytesIn>.*?(?=\"))".*?(?=\")"(?P<BytesOut>.*?(?=\"))".*?(?=\")"(?P<ItemsIn>.*?(?=\"))".*?(?=\")"(?P<ItemsOut>.*?(?=\"))".*?(?=\")"(?P<Duration>.*?(?=\"))".*?(?=\")"(?P<Amount>.*?(?=\"))".*?(?=\")"(?P<Quantity>.*?(?=\"))".*?(?=\")"(?P<Rate>.*?(?=\"))".*?(?=\")"(?P<Size>.*?(?=\"))".*?(?=v\=)(?P<Message>.*?(?=\<\/aie\>)).*?(?=\=)=\s"(?P<KBWebRefernce>.*?(?=\"))".*?(?=\")"(?P<OriginMACAddress>.*?(?=\"))".*?(?=\")"(?P<ImpactedMACAddress>.*?(?=\"))".*?(?=\")"(?P<OriginNATIPAddress>.*?(?=\"))".*?(?=\")"(?P<ImpactedNATIPAddress>.*?(?=\"))".*?(?=\")"(?P<OriginInterface>.*?(?=\"))".*?(?=\")"(?P<ImpactedInterface>.*?(?=\"))".*?(?=\")"(?P<AlarmPID>.*?(?=\"))".*?(?=\")"(?P<AlarmVersion>.*?(?=\"))".*?(?=\")"(?P<AlarmCommand>.*?(?=\"))".*?(?=\")"(?P<AlarmObjectName>.*?(?=\"))".*?(?=\")"(?P<OriginNATPORT>.*?(?=\"))".*?(?=\")"(?P<ImpactedNATPort>.*?(?=\"))"
/

Description

Loading markdown...
Submitted by Stephen Kim - 6 years ago