regex101: .NET 10.0 (C#) Match Workspace

Group timestamp_utc(?<timestamp_utc>\d\d\d\d\-\d\d\-\d\d\s\d\d\:\d\d\:\d\d)

\da Unicode decimal digit

\-the literal - (45₁₀ / 55₈ / 2D₁₆)

\da Unicode decimal digit

\-the literal - (45₁₀ / 55₈ / 2D₁₆)

\da Unicode decimal digit

\sa Unicode whitespace character

\da Unicode decimal digit

\:the literal : (58₁₀ / 72₈ / 3A₁₆)

\da Unicode decimal digit

\:the literal : (58₁₀ / 72₈ / 3A₁₆)

\da Unicode decimal digit

\sa Unicode whitespace character

Negated Character Class[^\s]+

+matches at least one character outside the set below:

\sa Unicode whitespace character

POSTthe literal text POST (case insensitive)

\sa Unicode whitespace character

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

RDWebthe literal text RDWeb (case insensitive)

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

Pagesthe literal text Pages (case insensitive)

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

Negated Character Class[^\/]+

+matches at least one character outside the set below:

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

loginthe literal text login (case insensitive)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

aspxthe literal text aspx (case insensitive)

\sa Unicode whitespace character

Negated Character Class[^\s]+

+matches at least one character outside the set below:

\sa Unicode whitespace character

Character Class[0-9]+

+matches at least one character from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\sa Unicode whitespace character

-the literal - (45₁₀ / 55₈ / 2D₁₆)

\sa Unicode whitespace character

Group ipaddress(?<ipaddress>[^\s]+)

Negated Character Class[^\s]+

+matches at least one character outside the set below:

\sa Unicode whitespace character

.*any Unicode character (except for line terminators), repeated any number of times

\sa Unicode whitespace character

200the literal text 200

\sa Unicode whitespace character

Negated Character Class[^\n]+

+matches at least one character outside the set below:

\na line-feed (newline) character (ASCII 10)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

i modifier: insensitive. Matches without distinguishing uppercase and lowercase letters

Search reference

Regular Expression

(?<timestamp_utc>\d\d\d\d\-\d\d\-\d\d\s\d\d\:\d\d\:\d\d)\s[^\s]+\sPOST\s\/RDWeb\/Pages\/[^\/]+\/login\.aspx\s[^\s]+\s[0-9]+\s-\s(?<ipaddress>[^\s]+).*\s200\s[^\n]+\n

Test String
New

2023-03-20 05:43:20 1.2.3.4 POST /RDWeb/Pages/en-US/login.aspx - 443 - 2.3.4.5 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/109.0.0.0+Safari/537.36 https://your.rdsserver.org.uk/RDWeb/webclient/ 200 0 0 15
2023-03-20 15:33:46 1.2.3.4 POST /RDWeb/Pages/en-US/login.aspx ReturnUrl=%2FRDWeb%2FPages%2Fen-US%2FDefault.aspx 443 - 2.3.4.5 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/111.0.0.0+Safari/537.36 https://your.rdsserver.org.uk/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 200 0 0 2265
2024-03-15 00:04:49 1.2.3.4 POST /RDWeb/Pages/en-US/login.aspx - 443 - 36.133.118.254 node-fetch/1.0+(+https://github.com/bitinn/node-fetch) - 200 0 0 763
2024-03-21 02:47:46 1.2.3.4 POST /RDWeb/Pages/en-US/login.aspx - 443 - 41.185.8.146 - - 200 0 0 391

Regular Expressions 101

Regular Expression

Test String
New

Substitution
Processing...

Regular Expression

Test StringNew

SubstitutionProcessing...

Test String
New

Substitution
Processing...