^start of string
Group x_forwarded_for(?<x_forwarded_for>(?:[0-9:.-]*, )?(?<clientip>[0-9:.-]*)) Non-Capturing Group(?:[0-9:.-]*, )? ?repeats the group contents below at most once:
*matches any number of characters from the set below:
0-9one character from 0 (4810) to 9 (5710)
:the literal : (5810 / 728 / 3A16)
.the literal . (4610 / 568 / 2E16)
-the literal - (4510 / 558 / 2D16)
Group clientip(?<clientip>[0-9:.-]*) *matches any number of characters from the set below:
0-9one character from 0 (4810) to 9 (5710)
:the literal : (5810 / 728 / 3A16)
.the literal . (4610 / 568 / 2E16)
-the literal - (4510 / 558 / 2D16)
the literal (3210 / 408 / 2016)
Group ident(?<ident>[^ ]*) Negated Character Class[^ ]* *matches any number of characters outside the set below:
the literal (3210 / 408 / 2016)
the literal (3210 / 408 / 2016)
Negated Character Class[^ ]* *matches any number of characters outside the set below:
the literal (3210 / 408 / 2016)
the literal (3210 / 408 / 2016)
\[the literal [ (9110 / 1338 / 5B16)
Group time(?<time>[^\]]*) Negated Character Class[^\]]* *matches any number of characters outside the set below:
\]the literal ] (9310 / 1358 / 5D16)
\]the literal ] (9310 / 1358 / 5D16)
\S+any non-whitespace character, repeated at least once
Non-Capturing Group(?: +(?<request>[^\"]*?)(?: +(?<httpversion>\S*))?)? ?repeats the group contents below at most once:
+the literal (3210 / 408 / 2016) , repeated at least once
Group request(?<request>[^\"]*?) Negated Character Class[^\"]*? *?matches any number of characters outside the set below:
\"the literal " (3410 / 428 / 2216)
Non-Capturing Group(?: +(?<httpversion>\S*))? ?repeats the group contents below at most once:
+the literal (3210 / 408 / 2016) , repeated at least once
Group httpversion(?<httpversion>\S*) \S*any non-whitespace character, repeated any number of times
Group response(?<response>[^ ]*) Negated Character Class[^ ]* *matches any number of characters outside the set below:
the literal (3210 / 408 / 2016)
the literal (3210 / 408 / 2016)
Group bytes(?<bytes>[^ ]*) Negated Character Class[^ ]* *matches any number of characters outside the set below:
the literal (3210 / 408 / 2016)
Group referer(?<referer>[^\"]*) Negated Character Class[^\"]* *matches any number of characters outside the set below:
\"the literal " (3410 / 428 / 2216)
Group agent(?<agent>[^\"]*) Negated Character Class[^\"]* *matches any number of characters outside the set below:
\"the literal " (3410 / 428 / 2216)
Group request_time(?<request_time>[^\"]*) Group host(?<host>[^\"]*) Non-Capturing Group(?::(?<host_port>\S+))? "the literal " (3410 / 428 / 2216)
Non-Capturing Group(?: ATI:"(?<amazn_trace_id>[^\"]*)")? Non-Capturing Group(?: "(?<hdr_location>[^\"]*)" "(?<request_length>[^\"]*)")? Non-Capturing Group(?: "(?<tls_version>[^\/]*)\/(?<tls_cipher>[^\"]*)")? Non-Capturing Group(?: trace_id:"(?<a0_request_id>[^\"]*)")? $end of string, or before its final line terminator