Regular Expressions 101

Pro

Group 1(^.*?)?

?repeats the group contents below at most once:

^start of line

.*?any character (except for line terminators), repeated any number of times

Group 2(\[[0-9]+:[0-9]+:[0-9]+:[0-9]+\] )?

?repeats the group contents below at most once:

\[the literal [ (91₁₀ / 133₈ / 5B₁₆)

Character Class[0-9]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Character Class[0-9]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Character Class[0-9]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Character Class[0-9]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\]the literal ] (93₁₀ / 135₈ / 5D₁₆)

the literal (32₁₀ / 40₈ / 20₁₆)

Group 3(".+?")

"the literal " (34₁₀ / 42₈ / 22₁₆)

.+?any character (except for line terminators), repeated at least once

"the literal " (34₁₀ / 42₈ / 22₁₆)

the literal (32₁₀ / 40₈ / 20₁₆)

Group 4([0-9]+)

Character Class[0-9]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

the literal (32₁₀ / 40₈ / 20₁₆)

Group 5([0-9-]+)

Character Class[0-9-]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

-the literal - (45₁₀ / 55₈ / 2D₁₆)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Detailed match information will be displayed here automatically.

25 tokens

Regular Expression

(^.*?)?(\[[0-9]+:[0-9]+:[0-9]+:[0-9]+\] )?(".+?") ([0-9]+) ([0-9-]+)

New

141.243.1.172 [29:23:53:25] "GET /Software.html HTTP/1.0" 200 233
[29:23:53:25] "GET /Software.html HTTP/1.0" 200 233
"GET /Software.html HTTP/1.0" 200 233

Substitution

141.243.1.172 [29:23:53:25] "GET /Software.html HTTP/1.0" 200 233
[29:23:53:25] "GET /Software.html HTTP/1.0" 200 233
"GET /Software.html HTTP/1.0" 200 233