regex101: PCRE (Legacy) Match Workspace

Non-Capturing Group(?: |^)

1st Alternative

the literal (32₁₀ / 40₈ / 20₁₆)

2nd Alternative^

^start of line

hostname=the literal text hostname= (case sensitive)

Non-Capturing Group(?:[^\s.]+\.)*?

*?repeats the group contents below any number of times:

Negated Character Class[^\s.]+

+matches at least one character outside the set below:

\sany whitespace character

.the literal . (46₁₀ / 56₈ / 2E₁₆)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Negated Character Class[^\s.]+

+matches at least one character outside the set below:

\sany whitespace character

.the literal . (46₁₀ / 56₈ / 2E₁₆)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

1st Alternative(?:ac|co)\.uk

Non-Capturing Group(?:ac|co)

1st Alternativeac

acthe literal text ac (case sensitive)

2nd Alternativeco

cothe literal text co (case sensitive)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

ukthe literal text uk (case sensitive)

2nd Alternativegovt?\.uk

govthe literal text gov (case sensitive)

t?optionally matches the literal t (116₁₀ / 164₈ / 74₁₆) (case sensitive)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

ukthe literal text uk (case sensitive)

3rd Alternativejudiciary\.uk

judiciarythe literal text judiciary (case sensitive)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

ukthe literal text uk (case sensitive)

4th Alternativel(?:ea|td)\.uk

lthe literal l (108₁₀ / 154₈ / 6C₁₆) (case sensitive)

Non-Capturing Group(?:ea|td)

1st Alternativeea

eathe literal text ea (case sensitive)

2nd Alternativetd

tdthe literal text td (case sensitive)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

ukthe literal text uk (case sensitive)

5th Alternativem(?:e|il|od)\.uk

mthe literal m (109₁₀ / 155₈ / 6D₁₆) (case sensitive)

Non-Capturing Group(?:e|il|od)

1st Alternativee

ethe literal e (101₁₀ / 145₈ / 65₁₆) (case sensitive)

2nd Alternativeil

ilthe literal text il (case sensitive)

3rd Alternativeod

odthe literal text od (case sensitive)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

ukthe literal text uk (case sensitive)

6th Alternativen(?:et|hs|ic)\.uk

nthe literal n (110₁₀ / 156₈ / 6E₁₆) (case sensitive)

Non-Capturing Group(?:et|hs|ic)

1st Alternativeet

2nd Alternativehs

3rd Alternativeic

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

ukthe literal text uk (case sensitive)

7th Alternativeorgn?\.uk

8th Alternativep(?:arliament|lc|olice)\.uk

9th Alternative(?:royal|sch)\.uk

10th Alternative[^\s.]+

Negative Lookahead(?!\S)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

25 tokens

Regular Expression

(?: |^)hostname=(?:[^\s.]+\.)*?(?P<myfield>[^\s.]+\.(?:(?:ac|co)\.uk|govt?\.uk|judiciary\.uk|l(?:ea|td)\.uk|m(?:e|il|od)\.uk|n(?:et|hs|ic)\.uk|orgn?\.uk|p(?:arliament|lc|olice)\.uk|(?:royal|sch)\.uk|[^\s.]+)(?!\S))

New

hostname=www.aaa.bbb.someurl.net

hostname=www.amazon.co.uk

2021-07-20 18:19:14 reason=Not allowed to browse this category event_id=12345 protocol=HTTP action=Blocked transactionsize=16051 responsesize=789 requestsize=456 urlcategory=Blocked serverip=1.2.4.5 clienttranstime=0 requestmethod=GET refererURL=None useragent=Microsoft-Delivery location=Internal ClientIP=5.6.7.8 status=403 user=John url=dl.delivery.mp.microsoft.com/filestreamingservice/files/abcd-efgh-ijkl/pieceshash vendor=Zscaler hostname=dl.delivery.mp.microsoft.com