Group src_host(?<src_host>\w+\.\w+:\d{2}) \w+any word character, repeated at least once
\.the literal . (4610 / 568 / 2E16)
\w+any word character, repeated at least once
:the literal : (5810 / 728 / 3A16)
\d{2}a digit, repeated exactly 2 times
\sany whitespace character
Group src_ip(?<src_ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) \d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
\D{1,6}any character that's not a digit, repeated between 1 and 6 times
Group date_time(?<date_time>[^ ]+) Negated Character Class[^ ]+ +matches at least one character outside the set below:
the literal (3210 / 408 / 2016)
\sany whitespace character
Group GMT_offset(?<GMT_offset>[^ ]+) Negated Character Class[^ ]+ +matches at least one character outside the set below:
the literal (3210 / 408 / 2016)
\]the literal ] (9310 / 1358 / 5D16)
\sany whitespace character
"the literal " (3410 / 428 / 2216)
Group action(?<action>(GET|POST|HEAD|TRACE|PUT|DELETE|CONNECT)) Group 6(GET|POST|HEAD|TRACE|PUT|DELETE|CONNECT) GETthe literal text GET (case sensitive) POSTthe literal text POST (case sensitive) HEADthe literal text HEAD (case sensitive) TRACEthe literal text TRACE (case sensitive) PUTthe literal text PUT (case sensitive) DELETEthe literal text DELETE (case sensitive) CONNECTthe literal text CONNECT (case sensitive) \sany whitespace character
Group hash_url(?<hash_url>[^ ]+) Negated Character Class[^ ]+ +matches at least one character outside the set below:
the literal (3210 / 408 / 2016)
\sany whitespace character
Group protocol(?<protocol>[^\"]+) Negated Character Class[^\"]+ +matches at least one character outside the set below:
\"the literal " (3410 / 428 / 2216)
\"the literal " (3410 / 428 / 2216)
\sany whitespace character
Group code(?<code>\d{1,3}) \d{1,3}a digit, repeated between 1 and 3 times
\sany whitespace character
Negated Character Class[^ ]+ +matches at least one character outside the set below:
the literal (3210 / 408 / 2016)
\sany whitespace character
\"the literal " (3410 / 428 / 2216)
Group referrer(?<referrer>[^ ]+) Negated Character Class[^ ]+ +matches at least one character outside the set below:
the literal (3210 / 408 / 2016)
\"the literal " (3410 / 428 / 2216)
\sany whitespace character
\"the literal " (3410 / 428 / 2216)
Group user_agent(?<user_agent>[^ ]+.+) Negated Character Class[^ ]+ .+any character (except for line terminators), repeated at least once
\"the literal " (3410 / 428 / 2216)
g modifier: global. Finds all matches instead of stopping after the first