Regular Expressions 101

x-forwarded-forthe literal text x-forwarded-for (case sensitive)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\s*any whitespace character, repeated any number of times

Group 1(\S+)

\S+any non-whitespace character, repeated at least once

"the literal " (34₁₀ / 42₈ / 22₁₆)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Detailed match information will be displayed here automatically.

Search reference

Regular Expression

x-forwarded-for\":\s*(\S+)"

New

{"timestamp":"2022-07-29T13:26:35.649Z","hostname":"host":"example.dev.com","method":"GET","remote_host":"10.3.6.0","request_headers":{"x-forwarded-for":"10.5.6.1","x-forwarded-proto":"https","x-forwarded-port":"443","host":"example.dev.com","x-amzn-xxx-id":"Root=xxxxxxxx","sec-xh-ux":"\".Not/A)Brand\";v=\"99\", \"Google Chrome\"

Regular Expression

Substitution