Regular Expressions 101

time=the literal text time= (case sensitive)

Group 1(\d+\-\d+\-\d+\s+\d+:\d+:\d+)

\d+a Unicode decimal digit, repeated at least once

\-the literal - (45₁₀ / 55₈ / 2D₁₆)

\d+a Unicode decimal digit, repeated at least once

\-the literal - (45₁₀ / 55₈ / 2D₁₆)

\d+a Unicode decimal digit, repeated at least once

\s+a Unicode whitespace character, repeated at least once

\d+a Unicode decimal digit, repeated at least once

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\d+a Unicode decimal digit, repeated at least once

:the literal : (58₁₀ / 72₈ / 3A₁₆)

\d+a Unicode decimal digit, repeated at least once

\|the literal | (124₁₀ / 174₈ / 7C₁₆)

action=the literal text action= (case sensitive)

Group 2(\w+)

\w+a Unicode word character, repeated at least once

\|the literal | (124₁₀ / 174₈ / 7C₁₆)

Character Class[f_name=(\S*)]?

?matches at most one character from the set below:

fthe literal f (102₁₀ / 146₈ / 66₁₆) (case sensitive)

_the literal _ (95₁₀ / 137₈ / 5F₁₆)

nthe literal n (110₁₀ / 156₈ / 6E₁₆) (case sensitive)

athe literal a (97₁₀ / 141₈ / 61₁₆) (case sensitive)

mthe literal m (109₁₀ / 155₈ / 6D₁₆) (case sensitive)

ethe literal e (101₁₀ / 145₈ / 65₁₆) (case sensitive)

=the literal = (61₁₀ / 75₈ / 3D₁₆)

(the literal ( (40₁₀ / 50₈ / 28₁₆)

\Sany character that is not Unicode whitespace

*the literal * (42₁₀ / 52₈ / 2A₁₆)

)the literal ) (41₁₀ / 51₈ / 29₁₆)

\|the literal | (124₁₀ / 174₈ / 7C₁₆)

has_accounting=0the literal text has_accounting=0 (case sensitive)

Detailed match information will be displayed here automatically.

Search reference

Regular Expression

time=(\d+\-\d+\-\d+\s+\d+:\d+:\d+)\|action=(\w+)\|[f_name=(\S*)]?\|has_accounting=0

New

time=2014-07-21 16:15:55|action=accept|f_name=eth3.2|has_accounting=0
time=2014-07-21 16:15:57|action=reject|has_accounting=0