regex101: Bespoke NGINX Log Parse

Group ip(?P<ip>\S*)

\S*any character that is not Unicode whitespace, repeated any number of times

the literal (32₁₀ / 40₈ / 20₁₆)

Group firstseperator(?P<firstseperator>-)

-the literal - (45₁₀ / 55₈ / 2D₁₆)

the literal (32₁₀ / 40₈ / 20₁₆)

Group userid(?P<userid>\S+|-)

1st Alternative\S+

\S+any character that is not Unicode whitespace, repeated at least once

2nd Alternative-

-the literal - (45₁₀ / 55₈ / 2D₁₆)

the literal (32₁₀ / 40₈ / 20₁₆)

Group timestamp(?P<timestamp>\[\S+ \S+)

\[the literal [ (91₁₀ / 133₈ / 5B₁₆)

\S+any character that is not Unicode whitespace, repeated at least once

the literal (32₁₀ / 40₈ / 20₁₆)

\S+any character that is not Unicode whitespace, repeated at least once

"the literal text "

Group URL(?P<URL>\S+|\S+ \S+ [A-Z/0-9.]+)

1st Alternative\S+

\S+any character that is not Unicode whitespace, repeated at least once

2nd Alternative\S+ \S+ [A-Z/0-9.]+

\S+any character that is not Unicode whitespace, repeated at least once

the literal (32₁₀ / 40₈ / 20₁₆)

\S+any character that is not Unicode whitespace, repeated at least once

the literal (32₁₀ / 40₈ / 20₁₆)

Character Class[A-Z/0-9.]+

+matches at least one character from the set below:

A-Zone character from A (65₁₀) to Z (90₁₀) (case sensitive)

/the literal / (47₁₀ / 57₈ / 2F₁₆)

0-9one character from 0 (48₁₀) to 9 (57₁₀)

.the literal . (46₁₀ / 56₈ / 2E₁₆)

" the literal text "

Group http_code(?P<http_code>[0-9]+)

Character Class[0-9]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

the literal (32₁₀ / 40₈ / 20₁₆)

Group guessing_size(?P<guessing_size>[0-9]+)

Character Class[0-9]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

"the literal text "

Group endpoint_url(?P<endpoint_url>\S+|-)

1st Alternative\S+

\S+any character that is not Unicode whitespace, repeated at least once

2nd Alternative-

-the literal - (45₁₀ / 55₈ / 2D₁₆)

" "the literal text " "

Group client_and_version(?P<client_and_version>[a-zA-Z/0-9.-]+)

Character Class[a-zA-Z/0-9.-]+

+matches at least one character from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

A-Zone character from A (65₁₀) to Z (90₁₀) (case sensitive)

/the literal / (47₁₀ / 57₈ / 2F₁₆)

0-9one character from 0 (48₁₀) to 9 (57₁₀)

.the literal . (46₁₀ / 56₈ / 2E₁₆)

-the literal - (45₁₀ / 55₈ / 2D₁₆)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Search reference

Regular Expression

(?P<ip>\S*) (?P<firstseperator>-) (?P<userid>\S+|-) (?P<timestamp>\[\S+ \S+) "(?P<URL>\S+|\S+ \S+ [A-Z/0-9.]+)" (?P<http_code>[0-9]+) (?P<guessing_size>[0-9]+) "(?P<endpoint_url>\S+|-)" "(?P<client_and_version>[a-zA-Z/0-9.-]+)

Unit Tests

There are no unit tests, click to add some.