Please enable JavaScript to use regex101
/
^
r
e
g
e
x
[
\
-
_
]
?
1
0
1
$
/
i
Regular
Expressions
101
Regular
Expressions
101
Upgrade to Pro
Enterprise
Regular Expression
/
nsssvcip\=(\d+\.\d+\.\d+\.\d+)
/
gm
Test String
New
2026-04-23T09:24:28.846823+01:00 logs-rv-wdc-snat.systems.aa.aaaa datetime=Thu Apr 23 07:07:46 2026,reason=Allowed,event_id=7631847931737997314,protocol=HTTPS,action=Allowed,transactionsize=20055,responsesize=7866,requestsize=12189,urlcategory=Microsoft-Entra-Auth-URL,serverip=44.111.22.666,clienttranstime=258,requestmethod=GET,refererURL=login.microsoftonline.com/e0fd434d-ba64-497b-90d2-859c472e1a92/oauth2/authorize?client_id=00000003-0000-0ff1-ce00-000000000000&response_mode=form_post&ear_jwe_crypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQU4zdWJ6alVGMmpVd3JwRU01R1ExTkYrM2JpSTlwR0g1TzRqMWRBZXl0dE5ENzFzV0xaMi9Xa1VVVUgzYnRRL3dMc015U3JGTEpOclowb3B2dUVyQW9zNTArVG5nV2ZaWmZ4cmxsY3RFelFyTFpGSnFuWnlNYnpzRWtSbjIyaDVoUUFBQUJqZzNZN3Zwd3FWVHBsVEFyWFFKN1Bocy9CbTJyNDJQQXM9In0=&ear_jwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1OM3ViempVRjJqVXdycEVNNUdRMU5GKzNiaaa5cEdINU80ajFkQWV5dHRORDcxc1dMWjIvV2tVVVVIM2J0US93QT09IiwieSI6IkFBQUFNTHNNeVNyRkxKTnJaMG9wdnVFckFvczUwK1RuZ1dmWlpmeHJsbGN0RXpRckxaRkpxblp5TWJ6c0VrUm4yMmg1aFE9PSIsImt0eSI6IkVDIn0=&spa_client_id=08e18876-6177-487e-b8b5-cf950c1e598c&client_info=1&response_type=code%20id_token%20spa_rt&resource=00000003-0000-0ff1-ce00-000000000000&scope=openid&nonce=D36139FC1DFCD19F17C047A589B1BFC813E4C802C7242137-EB56D7551602A094052B5A1FA60024A695B02C4D751C6417BBEB8EA46A360C11&redirect_uri=https://aaaa.sharepoint.com/_forms/default.aspx&state=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&claims={"id_token":{"xms_cc":{"values":["CP1"]}}}&wsucxt=1&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&client-request-id=76b50ca2-4014-f000-973e-e6bcf8104f08,useragent=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0,product=SSS,location=aaaa-RRR-aa-CCC->other,ClientIP=888.88.88.88,status=200,user=ste88IIII.g.mcfarlane@aaaagroup.com,url=login.microsoftonline.com/e0fd434d-ba64-497b-90d2-859c472e1a92/oauth2/authorize?client_id=00000003-0000-0ff1-ce00-00009999999999&response_mode=form_post&ear_jwe_crypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQU4zdWJ6alVGMmpVd3JwRU01R1ExTkYrM2JpSTlwR0g1TzRqMWRBZXl0dE5ENzFzV0xaMi9Xa1VVVUgzYnRRL3dMc015U3JGTEpOclowb3B2dUVyQW9zNTArVG5nV2ZaWmZ4cmxsY3RFelFyTFpGSnFuWnlNYnpzRWtSbjIyaDVoUUFBQUJqZzNZN3Zwd3FWVHBsVEFyWFFKN1Bocy9CbTJyNDJQQXM9In0=&ear_jwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1OM3ViempVRjJqVXdycEVNNUdRMU5GKzNiaaa5cEdINU80ajFkQWV5dHRORDcxc1dMWjIvV2tVVVVIM2J0US93QT09IiwieSI6IkFBQUFNTHNNeVNyRkxKTnJaMG9wdnVFckFvczUwK1RuZ1dmWlpmeHJsbGN0RXpRckxaRkpxblp5TWJ6c0VrUm4yMmg1aFE9PSIsImt0eSI6IkVDIn0=&spa_client_id=08e18876-6177-487e-b8b5-cf950c1e598c&client_info=1&response_type=code+id_token+spa_rt&resource=00000003-0000-0ff1-ce00-000000000000&scope=openid&nonce=D36139FC1DFCD19F17C047A589B1BFC813E4C802C7242137-EB56D7551602A094052B5A1FA60024A695B02C4D751C6417BBEB8EA46A360C11&redirect_uri=https://aaaa.sharepoint.com/_forms/default.aspx&state=OD0wJjMyPUFBTWpBUUFBQUJRNzI4MlFkU1lLamZBU0pYSiUyRmI4aVo4VzV2aGs1JTJCR2YwZTVycENpTkZKejAlMkIyclppTHpId0NQNVFKdiUyQk1pZHdGUjdLZkdvVjglMkJ3a2F0Q25XWHdFVnVXejUxUDNxYSUyQm9xTE9aZGwlMkJpckNxaEhIbiUyRk5xZ1VVWlZ5Q1ZIZVZORzc2VGRCWTBYbHVhb1ozY2d6NHNQRTJvNFI5OWpreHpkJTJCV1JmcW5kWFNQVkRzV0h0alQ3emZpOFJ6anZrJTJCVnQlMkJ5Q3JLV0F0WUJURTBvdHhSS2tyZGFGUU1pMGJNZExxJTJGTlVvQ2txdzlETVU4Vk80UmpYOHlwTGlSa3Q2cFdPYzB4bkQlMkJPZldISVQwTDN0d2FkdGRBc2tVZTlRcyUyQjV0VUJSZVIyc014JTJGRHB0QlZsZ0Y2WEJPMXlqMHhuUVFtZ21Qd3JYb1I3TE5rc2ExdjAlMkZ5bUpyYVhEQzVCd1pSZEhnMyUyQnBjc090SU51bENEeTdobnUlMkJxS2pUJTJCekNVJTNE&claims={"id_token":{"xms_cc":{"values":["CP1"]}}}&wsucxt=1&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&client-request-id=76b50ca2-4014-f000-973e-e6bcf8104f08&sso_reload=true&sso_nonce=AwABEgEAAAADAOz_BQD0_0V2b1N0c0FydGlmYWN0cwUAAAAAAFRx6EqTygzV91MRTmimkdYoCkt7FjhILaLnZTQ70idlaos8Ntm2hpmXxH9EMceMEolUwg68VVVhMScLoXg4IH0gAA&mscrid=76b50ca2-4014-f000-973e-e6bcf8104f08,vendor=Zscaler,hostname=login.microsoftonline.com,clientpublicIP=111.111.111.1,threatcategory=None,threatname=None,filetype=None,appname=Microsoft Login Services,pagerisk=10,department=WORKSPACE,urlsupercategory=User-defined,appclass=IT Services,dlpengine=None,urlclass=Bandwidth Loss,threatclass=None,dlpdictionaries=None,fileclass=None,bwthrottle=NO,servertranstime=256,contenttype=text/html,unscannabletype=None,devicehostname=kkkkkkkkkkkkK,deviceowner=steve.g.mcfarlane,datacentercity=Ma,datacentercountry=GB,df_hostname=None,trafficredirectmethod=ZscalerClientConnector_GRE,rulelabel=None,apprulelabel=Office365 tenant restriction,ssldecrypted=Yes,deviceostype=MAC OS,deviceosversion=Version 26.4.1 (Build 25E253) ;arm,deviceappversion=4.5.2.105,ztunnelversion=ZTUNNEL_1_0,site=None,nsssvcip=15.844.999.22,upload_filename=None,upload_filesubtype=None,upload_doc=None,upload_doct=None,upload_filet=None,clt_sport=49559,srv_dport=443 2026-04-23T14:46:40.857389+01:00 logs-rv-sygdc-snat.systems.aa.aaaa datetime=Thu Apr 23 12:01:10 2026,reason=Allowed,event_id=7631923540200980482,protocol=SSL,action=Allowed,transactionsize=37291,responsesize=22453,requestsize=14838,urlcategory=PROD-Intune-URLs,serverip=22.111.111.11,clienttranstime=135000,requestmethod=NA,refererURL=None,useragent=Unknown,product=NSS,location=aaaa-GRE-aa-WDC->other,ClientIP=111.11.11.111,status=NA,user=mohamed77uuuuuu.tariket@aaaa.com,url=teams.microsoft.com,vendor=Zscaler,hostname=teams.microsoft.com,clientpublicIP=111.111.211.3,threatcategory=None,threatname=None,filetype=None,appname=Microsoft Teams,pagerisk=0,department=REGIONAL TRF PRODUCT,urlsupercategory=User-defined,appclass=Enterprise,dlpengine=None,urlclass=Bandwidth Loss,threatclass=None,dlpdictionaries=None,fileclass=None,bwthrottle=NO,servertranstime=135000,contenttype=Other,unscannabletype=None,devicehostname=E78420L6239H85X,deviceowner=44119699,datacentercity=Lo,datacentercountry=GB,df_hostname=None,trafficredirectmethod=ZscalerClientConnector_GRE,rulelabel=None,apprulelabel=None,ssldecrypted=No,deviceostype=Windows OS,deviceosversion=Microsoft Windows 11 Enterprise;64 bit;amd64,deviceappversion=4.6.0.200,ztunnelversion=ZTUNNEL_2_0_DTLS1_2,site=None,nsssvcip=11.222.333.44,upload_filename=None,upload_filesubtype=None,upload_doc=None,upload_doct=None,upload_filet=None,clt_sport=49691,srv_dport=443
Extraction
Processing...