regex101: PCRE (Legacy) Match Workspace

Group clientIP(?P<clientIP>[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})

Character Class[0-9]{1,3}

{1,3}matches between 1 and 3 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]{1,3}

{1,3}matches between 1 and 3 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]{1,3}

{1,3}matches between 1 and 3 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]{1,3}

{1,3}matches between 1 and 3 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

, the literal text ,

Group userName(?P<userName>[^,]+)

Negated Character Class[^,]+

+matches at least one character outside the set below:

,the literal , (44₁₀ / 54₈ / 2C₁₆)

, the literal text ,

Group timestamp(?P<timestamp>[[0-9]{2}\/[0-9]{2}\/[0-9]{2}, [0-9]{1,2}:[0-9]{1,2}:[0-9]{1,2})

Character Class[[0-9]{2}

{2}matches exactly 2 characters from the set below:

[the literal [ (91₁₀ / 133₈ / 5B₁₆)

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

Character Class[0-9]{2}

{2}matches exactly 2 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

Character Class[0-9]{2}

{2}matches exactly 2 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

, the literal text ,

Character Class[0-9]{1,2}

{1,2}matches between 1 and 2 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Character Class[0-9]{1,2}

{1,2}matches between 1 and 2 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

:the literal : (58₁₀ / 72₈ / 3A₁₆)

Character Class[0-9]{1,2}

{1,2}matches between 1 and 2 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

, the literal text ,

Group serviceInstance(?P<serviceInstance>[^,]+)

Negated Character Class[^,]+

+matches at least one character outside the set below:

,the literal , (44₁₀ / 54₈ / 2C₁₆)

, the literal text ,

Group serverName(?P<serverName>[^,]+)

Negated Character Class[^,]+

+matches at least one character outside the set below:

,the literal , (44₁₀ / 54₈ / 2C₁₆)

, the literal text ,

Group serverIP(?P<serverIP>[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})

Character Class[0-9]{1,3}

{1,3}matches between 1 and 3 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]{1,3}

{1,3}matches between 1 and 3 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]{1,3}

{1,3}matches between 1 and 3 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

Character Class[0-9]{1,3}

{1,3}matches between 1 and 3 characters from the set below:

0-9one character from 0 (48₁₀) to 9 (57₁₀)

, the literal text ,

Group timeTaken(?P<timeTaken>[^,]+)

Negated Character Class[^,]+

+matches at least one character outside the set below:

,the literal , (44₁₀ / 54₈ / 2C₁₆)

, the literal text ,

Group clientBytesSent(?P<clientBytesSent>[^,]+)

, the literal text ,

Group serverBytesSent(?P<serverBytesSent>[^,]+)

, the literal text ,

Group serviceStatusCode(?P<serviceStatusCode>[^,]+)

, the literal text ,

Group windowsStatusCode(?P<windowsStatusCode>[^,]+)

, the literal text ,

Group requestType(?P<requestType>[^,]+)

, the literal text ,

Group targetOfOperation(?P<targetOfOperation>[^,]+)

, the literal text ,

Group parameters(?P<parameters>[^,]+)

,the literal , (44₁₀ / 54₈ / 2C₁₆)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

25 tokens

Regular Expression

(?P<clientIP>[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}), (?P<userName>[^,]+), (?P<timestamp>[[0-9]{2}\/[0-9]{2}\/[0-9]{2}, [0-9]{1,2}:[0-9]{1,2}:[0-9]{1,2}), (?P<serviceInstance>[^,]+), (?P<serverName>[^,]+), (?P<serverIP>[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}), (?P<timeTaken>[^,]+), (?P<clientBytesSent>[^,]+), (?P<serverBytesSent>[^,]+), (?P<serviceStatusCode>[^,]+), (?P<windowsStatusCode>[^,]+), (?P<requestType>[^,]+), (?P<targetOfOperation>[^,]+), (?P<parameters>[^,]+),

New

----iis logging---

192.168.114.201, -, 03/20/05, 7:55:20, W3SVC2, SERVER, 172.21.13.45, 4502, 163, 3223, 200, 0, GET, /DeptLogo.gif, -,

Substitution

----iis logging---

192.168.114.201, -, 03/20/05, 7:55:20, W3SVC2, SERVER, 172.21.13.45, 4502, 163, 3223, 200, 0, GET, /DeptLogo.gif, -,