#include <StringConstants.au3> ; to declare the Constants of StringRegExp
#include <Array.au3> ; UDF needed for _ArrayDisplay and _ArrayConcatenate
Local $sRegex = "(?m)(?P<time>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{0,3}) (?P<message>fail2ban.*(?P<gid>\[\d*\]: )(?P<level>[A-Z]{4,7}) .*)"
Local $sString = "2020-05-11 06:25:02,732 fail2ban.server [879]: INFO rollover performed on /var/log/fail2ban.log" & @CRLF & _
"2020-05-08 01:34:33,079 fail2ban.filter [16566]: INFO [sshd] Found 1.1.1.1 - 2020-05-08 01:34:33" & @CRLF & _
"2020-05-09 04:02:31,316 fail2ban.actions [16566]: NOTICE [sshd] Ban 1.0.0.1" & @CRLF & _
"2020-05-23 00:09:06,355 fail2ban.server [9474]: INFO Reload jail GHOST" & @CRLF & _
"2020-05-23 00:09:06,355 fail2ban.filter [9474]: INFO Removed logfile: '/opt/logs/ghost/https___nonsense_fyi_production.log'" & @CRLF & _
"2020-05-23 00:09:07,902 fail2ban.actions [9474]: NOTICE [GHOST] Flush ticket(s) with iptables-multiport" & @CRLF & _
"2020-05-23 00:09:07,902 fail2ban.actions [9474]: NOTICE [GHOST] Flush ticket(s) with iptables-allports" & @CRLF & _
"2020-05-23 00:09:09,699 fail2ban.jail [9474]: INFO Jail 'GHOST' stopped" & @CRLF & _
"2020-05-23 00:09:09,701 fail2ban.jail [9474]: INFO Creating new jail 'GHOST'" & @CRLF & _
"2020-05-23 00:09:09,701 fail2ban.jail [9474]: INFO Jail 'GHOST' uses pyinotify {}" & @CRLF & _
"2020-05-23 00:09:09,706 fail2ban.jail [9474]: INFO Initiated 'pyinotify' backend" & @CRLF & _
"2020-05-23 00:09:09,709 fail2ban.filter [9474]: INFO Added logfile: '/opt/logs/ghost/https___nonsense_fyi_production.log' (pos = 14909, hash = 7091b34995f750999f6c605cd6250439a2e0cde7)" & @CRLF & _
"2020-05-23 00:09:09,710 fail2ban.filter [9474]: INFO encoding: UTF-8" & @CRLF & _
"2020-05-23 00:09:09,711 fail2ban.filter [9474]: INFO maxRetry: 5" & @CRLF & _
"2020-05-23 00:09:09,711 fail2ban.filter [9474]: INFO findtime: 300" & @CRLF & _
"2020-05-23 00:09:09,712 fail2ban.actions [9474]: INFO banTime: 2592000" & @CRLF & _
"2020-05-23 00:09:09,714 fail2ban.jail [9474]: INFO Jail 'GHOST' started" & @CRLF & _
"2020-05-23 00:09:09,714 fail2ban.server [9474]: INFO Reload finished."
Local $aArray = StringRegExp($sString, $sRegex, $STR_REGEXPARRAYGLOBALFULLMATCH)
Local $aFullArray[0]
For $i = 0 To UBound($aArray) -1
_ArrayConcatenate($aFullArray, $aArray[$i])
Next
$aArray = $aFullArray
; Present the entire match result
_ArrayDisplay($aArray, "Result")
Please keep in mind that these code samples are automatically generated and are not guaranteed to work. If you find any syntax errors, feel free to submit a bug report. For a full regex reference for AutoIt, please visit: https://www.autoitscript.com/autoit3/docs/functions/StringRegExp.htm