regex101: Python Match Workspace

1st Alternative^([a-zA-Z]+ \d{1,2} \d{1,2}:\d{1,2}:\d{1,2})

^start of line

Group 1([a-zA-Z]+ \d{1,2} \d{1,2}:\d{1,2}:\d{1,2})

Character Class[a-zA-Z]+

+matches at least one character from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

A-Zone character from A (65₁₀) to Z (90₁₀) (case sensitive)

the literal (32₁₀ / 40₈ / 20₁₆)

\d{1,2}a Unicode decimal digit, repeated between 1 and 2 times

the literal (32₁₀ / 40₈ / 20₁₆)

\d{1,2}a Unicode decimal digit, repeated between 1 and 2 times

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\d{1,2}a Unicode decimal digit, repeated between 1 and 2 times

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\d{1,2}a Unicode decimal digit, repeated between 1 and 2 times

2nd Alternative([^ ]+)=([^ ]+)

Group 2([^ ]+)

Negated Character Class[^ ]+

+matches at least one character outside the set below:

the literal (32₁₀ / 40₈ / 20₁₆)

=the literal = (61₁₀ / 75₈ / 3D₁₆)

Group 3([^ ]+)

Negated Character Class[^ ]+

+matches at least one character outside the set below:

the literal (32₁₀ / 40₈ / 20₁₆)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

25 tokens

Regular Expression

^([a-zA-Z]+ \d{1,2} \d{1,2}:\d{1,2}:\d{1,2})|([^ ]+)=([^ ]+)

New

Aug 13 17:16:33 app-srv01 kernel: newConnection - IN=eth0 OUT= MAC=56:00:01:a1:5c:b7:fe:00:01:a1:5c:b7:08:00 SRC=91.103.125.80 DST=45.33.223.166 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=21200 DF PROTO=TCP SPT=55743 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0

Extraction

Aug 13 17:16:33 app-srv01 kernel: newConnection - IN=eth0 OUT= MAC=56:00:01:a1:5c:b7:fe:00:01:a1:5c:b7:08:00 SRC=91.103.125.80 DST=45.33.223.166 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=21200 DF PROTO=TCP SPT=55743 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0