$re = '/curl.+(\d).+\s*.+(\d{4}-\d{2}.+)\",\s*\".+\"\s*\:\s*\"([a-zA-z]*)\",/m';
$str = 'curl -XPUT \'http://localhost:9200/test8/test/2\' -d \'{
"date" : "2015-08-23T14:02:30",
"action" : "stop",
"myid" : 1
}\'
curl -XPUT \'http://localhost:9200/test8/test/3\' -d \'{
"date" : "2015-08-23T00:01:45",
"action" : "start",
"myid" : 2
}\'
curl -XPUT \'http://localhost:9200/test8/test/4\' -d \'{
"date" : "2015-08-23T00:01:55",
"action" : "start",
"myid" : 3
}\'
curl -XPUT \'http://localhost:9200/test8/test/5\' -d \'{
"date" : "2015-08-23T14:04:00",
"action" : "stop",
"myid" : 2
}\'
curl -XPUT \'http://localhost:9200/test8/test/6\' -d \'{
"date" : "2015-08-23T14:02:55",
"action" : "stop",
"myid" : 3
}';
preg_match_all($re, $str, $matches, PREG_SET_ORDER, 0);
// Print the entire match result
var_dump($matches);
Please keep in mind that these code samples are automatically generated and are not guaranteed to work. If you find any syntax errors, feel free to submit a bug report. For a full regex reference for PHP, please visit: http://php.net/manual/en/ref.pcre.php