Regular Expressions 101

Community Patterns

AEM - Author & Publisher - access.log - RegEx for SPLUNK fields (fi2Bmn/1)

0

Regular Expression
PCRE2 (PHP >=7.3)

/
(?P<req_ip>^[\d\.]+)\s+(?P<req_identity>.+?)\s+(?P<req_user>.+?)\s+\[(?P<req_date>.+?)\]\s+"(?P<req_method>.+?)\s+(?P<req_path>.+?)\s+(?P<req_protocoll>.+?)"\s+(?P<req_code>.+?)\s+(?P<req_size>.+?)\s+"(?P<req_referer>.+?)"\s+"(?P<req_device>.+?|)"
/
gm

Description

AEM - Author & Publisher - access.log - RegEx for SPLUNK fields (fi2Bmn/1)

Submitted by Robert Wunsch (wunsch@adobe.com) - 2 years ago