Regular Expressions 101

cisco_syslog_regex

Open Workspace
  • PCRE (Legacy)
  • Match
0

Regular Expression

/
^([^\s]+)\s([^\s]+)\s([^\s]+)\s([^\s]+)\s+(?<server>[^\s]+)\s+\*(?<task>[^\s]+\:)\s+([^\s]+)\s+([^\s]+)\s+([^\s]+)\s+\%(?<status>[^\s]+)\s+(?<task1>[^\s]+)\s+(?<action>[^\s]+\')\s+\w+\s+\w+\:\s+(?<src_mac>[^\s]+)\s+\w+\s+\w+\:\s+(?<dest_mac>[^\s]+)\s+\w+\s\'\w+\'\s+(?<tast2>)\w+\s+\'(?<action2>[^\s]+)\s+\w+\s+\'\w+\'\s+\w+\s+\w+\s+\'(?<timesec>[^\s]+)\s+\w+
/
g

Description

^([^\s]+)\s([^\s]+)\s([^\s]+)\s([^\s]+)\s+(?[^\s]+)\s+*(?[^\s]+:)\s+([^\s]+)\s+([^\s]+)\s+([^\s]+)\s+%(?[^\s]+)\s+(?[^\s]+)\s+(?[^\s]+')\s+\w+\s+\w+:\s+(?<src_mac>[^\s]+)\s+\w+\s+\w+:\s+(?<dest_mac>[^\s]+)\s+\w+\s'\w+'\s+(?)\w+\s+'(?[^\s]+)\s+\w+\s+'\w+'\s+\w+\s+\w+\s+'(?[^\s]+)\s+\w+

Submitted by Anonymous