Regular Expressions 101

Explanation

Pro

^start of line

Group 1(\w{3} \d{2} \d{2}:\d{2}:\d{2})

\w{3}any word character, repeated exactly 3 times

the literal (32₁₀ / 40₈ / 20₁₆)

\d{2}a digit, repeated exactly 2 times

the literal (32₁₀ / 40₈ / 20₁₆)

\d{2}a digit, repeated exactly 2 times

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\d{2}a digit, repeated exactly 2 times

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\d{2}a digit, repeated exactly 2 times

the literal (32₁₀ / 40₈ / 20₁₆)

Group 2([a-z]+)

Character Class[a-z]+

+matches at least one character from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

the literal (32₁₀ / 40₈ / 20₁₆)

Group 3([\w\d\[\]]+)

Character Class[\w\d\[\]]+

+matches at least one character from the set below:

\wany word character

\da digit

\[the literal [ (91₁₀ / 133₈ / 5B₁₆)

\]the literal ] (93₁₀ / 135₈ / 5D₁₆)

: the literal text :

Group 4(.*)

.*any character (except for line terminators), repeated any number of times

$end of line

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Match Information

Detailed match information will be displayed here automatically.

Quick Reference

25 tokens

Regular Expression

^(\w{3} \d{2} \d{2}:\d{2}:\d{2}) ([a-z]+) ([\w\d\[\]]+): (.*)$

Jul 28 06:26:52 debian tripwire[29710]: Integrity Check Failed: File could not be opened.
Jun 29 06:54:01 debian kernel: [586133.428279] device eth0 left promiscuous mode
Jul 29 09:29:07 debian kernel: [586139.564278] device eth0 entered promiscuous mode
Dec 14 17:30:45 debian Cacti[14619]: POLLER: WARNING: Cron is out of sync with the Poller Interval!
Jan 29 11:48:59 debian Cacti[14626]: CMDPHP: Host[1] DS[29] WARNING: Result from SNMP not valid.
END of 00:00:00 logging - rotation in progress