>the literal > (6210 / 768 / 3E16)
.*any character (except for line terminators), repeated any number of times
\s+any whitespace character, repeated at least once
Group DeviceIPAddress(?P<DeviceIPAddress>\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3}) \d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
\s+any whitespace character, repeated at least once
date=the literal text date= (case sensitive) .*any character (except for line terminators), repeated any number of times
\s+any whitespace character, repeated at least once
time=the literal text time= (case sensitive) Non-Capturing Group(?:\d+\W+\d+\W+\d+) \d+a digit, repeated at least once
\W+any non-word character, repeated at least once
\d+a digit, repeated at least once
\W+any non-word character, repeated at least once
\d+a digit, repeated at least once
\s+any whitespace character, repeated at least once
devname=the literal text devname= (case sensitive) Group DeviceName(?<DeviceName>.*) .*any character (except for line terminators), repeated any number of times
\s+any whitespace character, repeated at least once
devid=the literal text devid= (case sensitive) Group DeviceID(?P<DeviceID>\w+) \w+any word character, repeated at least once
\s+any whitespace character, repeated at least once
logid=the literal text logid= (case sensitive) Non-Capturing Group(?:\d+) \d+a digit, repeated at least once
\s+any whitespace character, repeated at least once
type=the literal text type= (case sensitive) Group LogType(?P<LogType>\w+) \w+any word character, repeated at least once
\s+any whitespace character, repeated at least once
subtype=the literal text subtype= (case sensitive) Group SubType(?P<SubType>\w+) \w+any word character, repeated at least once
\s+any whitespace character, repeated at least once
level=the literal text level= (case sensitive) Group Status(?P<Status>\w+) \w+any word character, repeated at least once
\s+any whitespace character, repeated at least once
vd=the literal text vd= (case sensitive) \w+any word character, repeated at least once
\s+any whitespace character, repeated at least once
logdesc=the literal text logdesc= (case sensitive) \Wany non-word character
+the literal + (4310 / 538 / 2B16)
Group Message(?P<Message>.*) .*any character (except for line terminators), repeated any number of times
\Wany non-word character
+the literal + (4310 / 538 / 2B16)
\s+any whitespace character, repeated at least once
session_id=the literal text session_id= (case sensitive) Group Session_ID(?P<Session_ID>\w+) \w+any word character, repeated at least once
\s+any whitespace character, repeated at least once
policyid=the literal text policyid= (case sensitive) Non-Capturing Group(?:\d+) \d+a digit, repeated at least once
\s+any whitespace character, repeated at least once
srcip=the literal text srcip= (case sensitive) Group SourceIP(?P<SourceIP>\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3}) \d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
\s+any whitespace character, repeated at least once
srcport=the literal text srcport= (case sensitive) Group SourcePort(?P<SourcePort>\d+) \d+a digit, repeated at least once
\s+any whitespace character, repeated at least once
dstip=the literal text dstip= (case sensitive) Group DestinationIP(?P<DestinationIP>\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3}) \d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
.any character (except for line terminators)
\d{1,3}a digit, repeated between 1 and 3 times
\s+any whitespace character, repeated at least once
dstport=the literal text dstport= (case sensitive) Group DestinationPort(?P<DestinationPort>\d+) \d+a digit, repeated at least once
\s+any whitespace character, repeated at least once
action=the literal text action= (case sensitive) Group Action(?P<Action>\w+) \w+any word character, repeated at least once
\s+any whitespace character, repeated at least once
alert=the literal text alert= (case sensitive) Non-Capturing Group(?:\d+) \d+a digit, repeated at least once
\s+any whitespace character, repeated at least once
desc=the literal text desc= (case sensitive) \Wany non-word character
+the literal + (4310 / 538 / 2B16)
Group Description(?P<Description>.*) .*any character (except for line terminators), repeated any number of times
\Wany non-word character
+the literal + (4310 / 538 / 2B16)
\s+any whitespace character, repeated at least once
msg=the literal text msg= (case sensitive) g modifier: global. Finds all matches instead of stopping after the first
m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string