regex101: PCRE (Legacy) Match Workspace

\"the literal " (34₁₀ / 42₈ / 22₁₆)

idthe literal text id (case sensitive)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

Group id(?<id>[^\"]+)

Negated Character Class[^\"]+

+matches at least one character outside the set below:

\"the literal " (34₁₀ / 42₈ / 22₁₆)

,the literal , (44₁₀ / 54₈ / 2C₁₆)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

categorythe literal text category (case sensitive)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

Group category(?<category>[^\"]+)

Negated Character Class[^\"]+

+matches at least one character outside the set below:

\"the literal " (34₁₀ / 42₈ / 22₁₆)

,the literal , (44₁₀ / 54₈ / 2C₁₆)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

correlationIdthe literal text correlationId (case sensitive)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Group correlationId(?<correlationId>[^\"]+)

Negated Character Class[^\"]+

+matches at least one character outside the set below:

\"the literal " (34₁₀ / 42₈ / 22₁₆)

,the literal , (44₁₀ / 54₈ / 2C₁₆)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

activityDateTimethe literal text activityDateTime (case sensitive)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\"the literal " (34₁₀ / 42₈ / 22₁₆)

Group activityDateTime(?<activityDateTime>[^\"]+)

Negated Character Class[^\"]+

+matches at least one character outside the set below:

\"the literal " (34₁₀ / 42₈ / 22₁₆)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

25 tokens

Regular Expression

\"id\":\"(?<id>[^\"]+)\",\"category\":\"(?<category>[^\"]+)\",\"correlationId\":(?<correlationId>[^\"]+),\"activityDateTime\":\"(?<activityDateTime>[^\"]+)

New

{"@odata.context":"https://graph.microsoft.com/v1.0/$metadata#auditLogs/directoryAudits","value":[]}
{"@odata.context":"https://graph.microsoft.com/v1.0/$metadata#auditLogs/directoryAudits","value":[]}
{"@odata.context":"https://graph.microsoft.com/v1.0/$metadata#auditLogs/directoryAudits","value":[{"id":"B2Cxx","category":"xxx","correlationId":xxx,"activityDateTime":"xxx"....},{"id":"B2Cxx","category":"xxx","correlationId":xxx,"activityDateTime":"xxx"....},{"id":"B2Cxx","category":"xxx","correlationId":xxx,"activityDateTime":"xxx"....}]}