Please enable JavaScript to use regex101
/
^
r
e
g
e
x
[
\
-
_
]
?
1
0
1
$
/
i
Reg
ular
Ex
pressions
101
Upgrade to Pro
Enterprise
Regular Expression
/
^(?P<datetime>.+?) host1
/
gm
Input 1
1
New
<31>Sep 1 12:08:03 awsor1dlclfm01 corelight-fleetd[1633]: {"time":"2025-09-01T12:08:03.176948306Z","level":"INFO","prefix":"-","file":"properties.go","line":"747","message":"Sensor d5-5b-3b-8a-53-2e-b9-ee OPTIONS /api/yara/rules: status=404, response: "}
Substitution
<31>Sep 1 12:08:03 awsor1dlclfm01 corelight-fleetd[1633]: {"time":"2025-09-01T12:08:03.176948306Z","level":"INFO","prefix":"-","file":"properties.go","line":"747","message":"Sensor d5-5b-3b-8a-53-2e-b9-ee OPTIONS /api/yara/rules: status=404, response: "}