Regular Expressions 101

Community Patterns

AEM - Author & Publisher - access.log - REGEX for SPLUNK fields

0

Regular Expression
PCRE2 (PHP >=7.3)

/
(?P<req_ip>^[\d\.]+)\s+(?P<req_identity>.+?)\s+(?P<req_user>.+?)\s+(?P<req_date>.+?)\s+(?P<req_offset>.+?)\s+"(?P<req_method>.+?)\s+(?P<req_path>.+?)\s+(?P<req_protocoll>.+?)"\s+(?P<req_code>.+?)\s+(?P<req_size>.+?)\s+"(?P<req_referer>.+?)"\s+"(?P<req_device>.+?)"
/
gm

Description

AEM - Author & Publisher - access.log - REGEX for SPLUNK fields

Submitted by Robert Wunsch (wunsch@adobe.com) - a year ago