^start of line
Group timestamp(?<timestamp>\d+-\d+-\d+T\d+:\d+:\d+\.\d+\w) \d+a digit, repeated at least once
-the literal - (4510 / 558 / 2D16)
\d+a digit, repeated at least once
-the literal - (4510 / 558 / 2D16)
\d+a digit, repeated at least once
Tthe literal T (8410 / 1248 / 5416) (case sensitive)
\d+a digit, repeated at least once
:the literal : (5810 / 728 / 3A16)
\d+a digit, repeated at least once
:the literal : (5810 / 728 / 3A16)
\d+a digit, repeated at least once
\.the literal . (4610 / 568 / 2E16)
\d+a digit, repeated at least once
\wany word character
\s+any whitespace character, repeated at least once
Negated Character Class[^ ]+ +matches at least one character outside the set below:
the literal (3210 / 408 / 2016)
\s+any whitespace character, repeated at least once
Negated Character Class[^:]+ +matches at least one character outside the set below:
:the literal : (5810 / 728 / 3A16)
:the literal : (5810 / 728 / 3A16)
\s+any whitespace character, repeated at least once
UserID:the literal text UserID: (case sensitive) \s+any whitespace character, repeated at least once
\'the literal ' (3910 / 478 / 2716)
Group UserID(?<UserID>[^\']+) Negated Character Class[^\']+ +matches at least one character outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
UserType:the literal text UserType: (case sensitive) \s+any whitespace character, repeated at least once
\'the literal ' (3910 / 478 / 2716)
Group UserType(?<UserType>[^\']+) Negated Character Class[^\']+ +matches at least one character outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
System:the literal text System: (case sensitive) \s+any whitespace character, repeated at least once
\'the literal ' (3910 / 478 / 2716)
Group System(?<System>[^\']+) Negated Character Class[^\']+ +matches at least one character outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
UAT:the literal text UAT: (case sensitive) \s+any whitespace character, repeated at least once
\'the literal ' (3910 / 478 / 2716)
Negated Character Class[^\']+ +matches at least one character outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
EventType:the literal text EventType: (case sensitive) \s+any whitespace character, repeated at least once
\'the literal ' (3910 / 478 / 2716)
Group EventType(?<EventType>[^\']+) Negated Character Class[^\']+ +matches at least one character outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
EventID:the literal text EventID: (case sensitive) \s+any whitespace character, repeated at least once
\'the literal ' (3910 / 478 / 2716)
Group EventID(?<EventID>[^\']+) Negated Character Class[^\']+ +matches at least one character outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
Subject:the literal text Subject: (case sensitive) \s+any whitespace character, repeated at least once
\'the literal ' (3910 / 478 / 2716)
Group Subject(?<Subject>[^\']+) Negated Character Class[^\']+ +matches at least one character outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
Scode:the literal text Scode: (case sensitive) \s+any whitespace character, repeated at least once
\'the literal ' (3910 / 478 / 2716)
Group Scode(?<Scode>[^\']*) Negated Character Class[^\']* *matches any number of characters outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
\s+any whitespace character, repeated at least once
EventStatus:the literal text EventStatus: (case sensitive) \s+any whitespace character, repeated at least once
Group EventStatus(?<EventStatus>\d*) \d*a digit, repeated any number of times
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
TimeStamp:the literal text TimeStamp: (case sensitive) \s*any whitespace character, repeated any number of times
\'the literal ' (3910 / 478 / 2716)
Group TimeStamp(?<TimeStamp>[^\']*) Negated Character Class[^\']* *matches any number of characters outside the set below:
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
Device:the literal text Device: (case sensitive) \s*any whitespace character, repeated any number of times
\'the literal ' (3910 / 478 / 2716)
Group Device(?<Device>[^\']*) Negated Character Class[^\']* \'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
Msg:the literal text Msg: (case sensitive) \s*any whitespace character, repeated any number of times
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
var:the literal text var: (case sensitive) \s*any whitespace character, repeated any number of times
\'the literal ' (3910 / 478 / 2716)
\'the literal ' (3910 / 478 / 2716)
g modifier: global. Finds all matches instead of stopping after the first
m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string