regex101: PCRE2 (PHP) Match Workspace

Group file(?<file>\w+\.(jpg|pdf|png))

\w+any word character, repeated at least once

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Group 2(jpg|pdf|png)

1st Alternativejpg

jpgthe literal text jpg (case sensitive)

2nd Alternativepdf

pdfthe literal text pdf (case sensitive)

3rd Alternativepng

pngthe literal text png (case sensitive)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Search reference

Regular Expression

(?<file>\w+\.(jpg|pdf|png))

New

date=2023-07-28 time=09:00:22.791 device_id=10000 log_id=000123 type=spam subtype=default pri=information  session_id="1138-7644" client_name="" client_ip="1.1.1.1" dst_ip="1.1.1.1" from="email" to="email" subject="TITLE" msg="Antispam identified spam URL: http://website.jpg"
date=2023-07-28 time=08:51:25.640 device_id=02222 log_id=00023 type=virus subtype=sandbox pri=information  from="" to="" client_name="" client_ip="" session_id="1000-0322" msg="File file.pdf has been sent to Sandbox"

Regular Expressions 101

Regular Expression

Substitution