Regular Expressions 101

Order By

Sponsors
There are currently no sponsors. Become a sponsor today!

Community Patterns

0

Car Seat (Nuna) CLP

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

Filename from Ossec lgs

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

Commit msg

Golang
no description available
Submitted by anonymous - 4 years ago
0

Encontrar tags HTML que estejam vazias

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

Movements

Python
no description available
Submitted by anonymous - 5 years ago
0

partial gtaccesss

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

Telephone Thai Number

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

Thai District

Python
no description available
Submitted by anonymous - 5 years ago
0

Thai Province

Python
no description available
Submitted by anonymous - 4 years ago
0

Thai Zipcode

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 4 years ago
0

phone numbers to links

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

replace more empty <p> by one

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

Split args

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

index-delete

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
0

Retailer Regex

ECMAScript (JavaScript)
no description available
Submitted by anonymous - 5 years ago
0

block-redirect-https://www.arubanetworks.com

Python
^block-redirect-https?://www\.\w+\.\w+$
Submitted by anonymous - 5 years ago
0

ntp standalone vlan-range 1

Python
^ntp standalone vlan-range\s\d
Submitted by anonymous - 5 years ago
0

tilak hex uploader

PCRE (PHP <7.3)
tilak hex uploader
Submitted by anonymous - 5 years ago
0

LogRhythm - Parser - Forcepoint Email Gateway

PCRE (PHP <7.3)
This parser has been built based on a request I've seen in the LogRhythm Community (https://community.logrhythm.com/t5/MPE-Rules/Forcepoint-Websense-Parsing/m-p/395753#M1713). As we know. we are have no options to change the tags names based on the right names that we have in the logging format. So...
Submitted by anonymous - 5 years ago
0

Drupal get node from anchor

PCRE (PHP <7.3)
no description available
Submitted by anonymous - 5 years ago
1...345346347348349...902

Community Library Entry

0

Regular Expression
PCRE (PHP <7.3)

/
^\"(?<timestart>\d{4}\/\d{2}\/\d{2}\s\d{2}\:\d{2}\:\d{2})?([\"|\,]*)?(?<recipient>[\w|\.|\-|_|\d]*@(?<domainimpacted>[\w|\.|\-|_|\d]*))?([\"|\,]*)?(?<subject>[\w|\s|\#|\@|\±|\§|\d|\!|\$|\%|\^|\,|\.|\(|\)|\[|\]|\{|\}|\:|\-|\&|\*|\'|\=|\+]*)?([\"|\,]*)?(?<action>\w*)?([\"|\,]*)?(?<sender>[\w|\.|\-|_|\d]*@(?<domainorigin>[\w|\.|\-|_|\d]*))?([\"|\,]*)?(?<account>[\w|\.|\-|_|\d|\,|\s]*)?([\"|\,]*)?(?<status>[\w|\.|\-|_|\d]*)?([\"|\,]*)?(?<object>[\w|\.|\-|_|\d]*)?([\"|\,]*)?(?<reason>[\w|\.|\-|_|\d]*)?([\"|\,]*)?(?<policy>[\w|\.|\-|_|\d]*)?([\"|\,]*)?(?<objecttype>[\w|\.|\-|_|\d|\s|\,]*)?([\"|\,]*)?(?<size>[\d]*)?([\"|\,]*)?(?<command>[\w|\.|\-|_|\d]*)?([\"|\,]*)?(?<objectname>[\w|\.|\-|_|\d]*)?([\"|\,]*)?(?<threatname>[\w|\.|\-|_|\d]*)?([\"|\,]*)?
/
gm
Open regex in editor

Description

This parser has been built based on a request I've seen in the LogRhythm Community (https://community.logrhythm.com/t5/MPE-Rules/Forcepoint-Websense-Parsing/m-p/395753#M1713). As we know. we are have no options to change the tags names based on the right names that we have in the logging format. So that is a kind of limitation that we face in the platform from indexing perspective. So avoid change the tags names that we have selected here.

Submitted by anonymous - 5 years ago