Regular Expressions 101

,"the literal text ,"

Group date(?<date>\d\d\d\d-\d\d-\d\d)

\da digit

-the literal - (45₁₀ / 55₈ / 2D₁₆)

\da digit

-the literal - (45₁₀ / 55₈ / 2D₁₆)

\da digit

\ the literal (32₁₀ / 40₈ / 20₁₆)

Group time(?<time>\d\d:\d\d:\d\d)

\da digit

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\da digit

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\da digit

.*any character (except for line terminators), repeated any number of times

\[the literal [ (91₁₀ / 133₈ / 5B₁₆)

Group jail(?<jail>sshd|recidive|mysqld-auth)

1st Alternativesshd

sshdthe literal text sshd (case sensitive)

2nd Alternativerecidive

recidivethe literal text recidive (case sensitive)

3rd Alternativemysqld-auth

mysqld-auththe literal text mysqld-auth (case sensitive)

\]the literal ] (93₁₀ / 135₈ / 5D₁₆)

\ the literal (32₁₀ / 40₈ / 20₁₆)

Group action(?<action>[a-zA-z]*)

Character Class[a-zA-z]*

*matches any number of characters from the set below:

a-zone character from a (97₁₀) to z (122₁₀) (case sensitive)

A-zone character from A (65₁₀) to z (122₁₀) (case sensitive)

\ the literal (32₁₀ / 40₈ / 20₁₆)

Group ip_address(?<ip_address>[\d\.]*)

Character Class[\d\.]*

*matches any number of characters from the set below:

\da digit

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

No unit tests · Add a test to get started

Search reference

Regular Expression

,"(?<date>\d\d\d\d-\d\d-\d\d)\ (?<time>\d\d:\d\d:\d\d).*\[(?<jail>sshd|recidive|mysqld-auth)\]\ (?<action>[a-zA-z]*)\ (?<ip_address>[\d\.]*)

There are no unit tests, click to add some.