Regular Expressions 101

Negative Lookahead(?!Type\=\w+)

Typethe literal text Type (case sensitive)

\=the literal = (61₁₀ / 75₈ / 3D₁₆)

\w+any word character, repeated at least once

.+any character (except for line terminators), repeated at least once

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Detailed match information will be displayed here automatically.

Search reference

Regular Expression

(?!Type\=\w+).+

Test String
New

2/01/2018 09:56:03 AM
LogName=Security
SourceName=Microsoft Windows security auditing.
EventCode=4624
EventType=0
Type=Information
ComputerName=COMPUTER1
TaskCategory=Logon
OpCode=Info
RecordNumber=1072237543
Keywords=Audit Success

Regular Expression

Test StringNew

ExtractionProcessing...

Test String
New

Extraction
Processing...