Regular Expressions 101

Pro

Group field2(?<field2>\w+)

\w+any word character, repeated at least once

\\the literal \ (92₁₀ / 134₈ / 5C₁₆)

Group field3(?<field3>[^\/]+)

Negated Character Class[^\/]+

+matches at least one character outside the set below:

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

$end of line

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Detailed match information will be displayed here automatically.

25 tokens

Regular Expression

(?<field2>\w+)\\(?<field3>[^\/]+)$

New

sourcefield=/var/log/bash_history/localuser/DOMAIN\first.last.domain
sourcefield=/var/log/bash_history/DOMAIN\first.last.domain/DOMAIN\first.last.domain

Substitution

sourcefield=/var/log/bash_history/localuser/DOMAIN\first.last.domain
sourcefield=/var/log/bash_history/DOMAIN\first.last.domain/DOMAIN\first.last.domain