regex101: Imperva audit log regex

Group 1(^[A-Z][0-9]{6})

^start of line

Character Class[A-Z]

A-Zone character from A (65₁₀) to Z (90₁₀) (case sensitive)

Character Class[0-9]{6}

{6}matches exactly 6 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\sany whitespace character

Group 2([0-9]{2}:[0-9]{2}:[0-9]{2}.[0-9]{6})

Character Class[0-9]{2}

{2}matches exactly 2 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Character Class[0-9]{2}

{2}matches exactly 2 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Character Class[0-9]{2}

{2}matches exactly 2 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

.any character (except for line terminators)

Character Class[0-9]{6}

{6}matches exactly 6 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\sany whitespace character

Group 3([0-9]{4})

Character Class[0-9]{4}

{4}matches exactly 4 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\sany whitespace character

Group 4([a-z]*\/[a-z]*_[a-z]*.go:[0-9]*)

Character Class[a-z]*

*matches any number of characters from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

Character Class[a-z]*

*matches any number of characters from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

_the literal _ (95₁₀ / 137₈ / 5F₁₆)

Character Class[a-z]*

*matches any number of characters from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

.any character (except for line terminators)

go:the literal text go: (case sensitive)

Character Class[0-9]*

*matches any number of characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\sany whitespace character

Group 5(\[[a-z]*[0-9]*,[a-z]*=[0-9]*[0-9]\.[0-9]*\.[0-9]*\.[0-9]*:[0-9]*,[a-z]*,[a-z]*=[a-z]*\])

\[the literal [ (91₁₀ / 133₈ / 5B₁₆)

Character Class[a-z]*

*matches any number of characters from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

Character Class[0-9]*

*matches any number of characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

,the literal , (44₁₀ / 54₈ / 2C₁₆)

Character Class[a-z]*

*matches any number of characters from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

=the literal = (61₁₀ / 75₈ / 3D₁₆)

Character Class[0-9]*

*matches any number of characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

Character Class[0-9]

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]*

*matches any number of characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]*

*matches any number of characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]*

*matches any number of characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Character Class[0-9]*

*matches any number of characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

,the literal , (44₁₀ / 54₈ / 2C₁₆)

Character Class[a-z]*

,the literal , (44₁₀ / 54₈ / 2C₁₆)

Character Class[a-z]*

=the literal = (61₁₀ / 75₈ / 3D₁₆)

Character Class[a-z]*

\]the literal ] (93₁₀ / 135₈ / 5D₁₆)

\sany whitespace character

Group 6([0-9])*

\sany whitespace character

Group 7([a-z]*)

\sany whitespace character

Group 8(".*?")

\sany whitespace character

Group 9(\{".*?\})

\sany whitespace character

Group 10(".*?")

\sany whitespace character

Group 11(\{\})

\sany whitespace character

Group 12([0-9]*.[0-9]*)

\sany whitespace character

Group 13([0-9*])

\sany whitespace character

Group 14([A-Z]*)

\sany whitespace character

Group 15([0-9]*)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Search reference

Regular Expression

(^[A-Z][0-9]{6})\s([0-9]{2}:[0-9]{2}:[0-9]{2}.[0-9]{6})\s([0-9]{4})\s([a-z]*\/[a-z]*_[a-z]*.go:[0-9]*)\s\s(\[[a-z]*[0-9]*,[a-z]*=[0-9]*[0-9]\.[0-9]*\.[0-9]*\.[0-9]*:[0-9]*,[a-z]*,[a-z]*=[a-z]*\])\s([0-9])*\s([a-z]*)\s(".*?")\s(\{".*?\})\s(".*?")\s(\{\})\s([0-9]*.[0-9]*)\s([0-9*])\s([A-Z]*)\s([0-9]*)

New

I220430 05:12:06.367747 2604 sql/exec_log.go:188  [n1,client=127.0.0.1:40190,hostnossl,user=root] 2 exec "$ cockroach sql" {"imperva"[52]:READWRITE} "INSERT INTO imperva(ice_cream, ramen, pizza) VALUES ('mister', 'motomachi', 'pizzeria farina')" {} 4.714 1 OK 0

Regular Expressions 101

Regular Expression

Substitution