Regular Expressions 101

date_time=the literal text date_time= (case sensitive)

Group 1(.+)

.+any character (except for line terminators), repeated at least once

user=the literal text user= (case sensitive)

Group 2(.+)

.+any character (except for line terminators), repeated at least once

ip_address=the literal text ip_address= (case sensitive)

Group 3(.+)

.+any character (except for line terminators), repeated at least once

origin=the literal text origin= (case sensitive)

Group 4(.+)

.+any character (except for line terminators), repeated at least once

action=the literal text action= (case sensitive)

Group 5(.+)

.+any character (except for line terminators), repeated at least once

the literal (32₁₀ / 40₈ / 20₁₆)

Group 6(password=(.+)|project=(.+)|additional=(.+))+

+repeats the group contents below at least once:

1st Alternativepassword=(.+)

password=the literal text password= (case sensitive)

Group 7(.+)

.+any character (except for line terminators), repeated at least once

2nd Alternativeproject=(.+)

project=the literal text project= (case sensitive)

Group 8(.+)

.+any character (except for line terminators), repeated at least once

3rd Alternativeadditional=(.+)

additional=the literal text additional= (case sensitive)

Group 9(.+)

.+any character (except for line terminators), repeated at least once

Detailed match information will be displayed here automatically.

Search reference

Regular Expression

date_time=(.+) user=(.+) ip_address=(.+) origin=(.+) action=(.+) (password=(.+)|project=(.+)|additional=(.+))+

New

date_time=2017-01-27 23:29:06 user=John Doe (86) ip_address=10.10.44.131 origin=web action=add_password password=Non-ACS Devices (1099) project=Infrastructure & Operations (31) additional=Import

Regular Expression

Extraction