regex101: ASA_Signture

Pro

Group src_ip(?<src_ip>\d{0,2}\.\d{0,2}\.\d{0,2}\.\d{0,2})

\d{0,2}a digit, repeated between 0 and 2 times

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

\d{0,2}a digit, repeated between 0 and 2 times

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

\d{0,2}a digit, repeated between 0 and 2 times

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

\d{0,2}a digit, repeated between 0 and 2 times

\sany whitespace character

Group signture(?<signture>%(?<product>ASA))

%the literal % (37₁₀ / 45₈ / 25₁₆)

Group product(?<product>ASA)

ASAthe literal text ASA (case sensitive)

-the literal - (45₁₀ / 55₈ / 2D₁₆)

Group version(?<version>(?<release>\d+)-(?<build>\d+))

Group release(?<release>\d+)

\d+a digit, repeated at least once

-the literal - (45₁₀ / 55₈ / 2D₁₆)

Group build(?<build>\d+)

\d+a digit, repeated at least once

:the literal : (58₁₀ / 72₈ / 3A₁₆)

25 tokens

Regular Expression

(?<src_ip>\d{0,2}\.\d{0,2}\.\d{0,2}\.\d{0,2})\s(?<signture>%(?<product>ASA))-(?<version>(?<release>\d+)-(?<build>\d+)):

May  9 14:30:00 10.25.8.3 %ASA-6-302013: Built outbound TCP connection 1032748840 for MGM-CML-NON-LB-SRV-Log:10.25.3.21/9997 (10.25.3.21/9997) to MIT-IBMgmt-NW:10.70.21.165/4379 (10.70.21.165/4379)

Extraction

May  9 14:30:00 10.25.8.3 %ASA-6-302013: Built outbound TCP connection 1032748840 for MGM-CML-NON-LB-SRV-Log:10.25.3.21/9997 (10.25.3.21/9997) to MIT-IBMgmt-NW:10.70.21.165/4379 (10.70.21.165/4379)