d":1114,"slug":"authlog-parsing","tags":"auth-log, parsing, log-analysis, syslog, regex","flags":"gm","regex":"^(?\\S{3})? {1,2}(?\\S+) (?\\S+) (?\\S+) (?.+?(?=\\[)|.+?(?=))[^a-zA-Z0-9](?\\d{1,7}|)[^a-zA-Z0-9]{1,3}(?.*)$","score":0,"title":"Auth.log Parsing","flavor":"pcre2","hidden":0,"upvotes":0,"delimiter":"/","downvotes":0,"originalId":"ImwoFl","testString":"$14","dateCreated":"2022-10-09T01:08:48.000Z","description":"This regex parses standard auth.log entries, capturing the month, day, time, hostname, process name, PID, and the rest of the message. It handles optional month and PID, and is useful for extracting structured fields from Linux authentication logs for monitoring or analysis.","dateModified":"2026-08-16T03:54:25.992Z","aiDescription":"This regex parses standard auth.log entries, capturing the month, day, time, hostname, process name, PID, and the rest of the message. It handles optional month and PID, and is useful for extracting structured fields from Linux authentication logs for monitoring or analysis."}}]}] e:null 12:[["$","title","0",{"children":"Auth.log Parsing — PCRE2 Regex Editor | RegexEditor.dev"}],["$","meta","1",{"name":"description","content":"This regex parses standard auth.log entries, capturing the month, day, time, hostname, process name, PID, and the rest of the message. It handles optional…"}],["$","meta","2",{"name":"author","content":"RegexEditor.dev"}],["$","link","3",{"rel":"manifest","href":"/site.webmanifest","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"auth-log, parsing, log-analysis, syslog, regex, pcre2 regex, regular expression, online regex editor, Auth.log Parsing"}],["$","meta","5",{"name":"creator","content":"RegexEditor.dev"}],["$","meta","6",{"name":"publisher","content":"RegexEditor.dev"}],["$","meta","7",{"name":"robots","content":"index, follow"}],["$","meta","8",{"name":"msapplication-TileColor","content":"#0066cc"}],["$","meta","9",{"name":"application-name","content":"RegexEditor.dev"}],["$","meta","10",{"name":"application/ld+json","content":"{\"@context\":\"https://schema.org\",\"@type\":\"SoftwareSourceCode\",\"name\":\"Auth.log Parsing\",\"description\":\"This regex parses standard auth.log entries, capturing the month, day, time, hostname, process name, PID, and the rest of the message. It handles optional month and PID, and is useful for extracting structured fields from Linux authentication logs for monitoring or analysis.\",\"programmingLanguage\":\"pcre2\",\"codeValue\":\"/^(?\\\\S{3})? {1,2}(?\\\\S+) (?\\\\S+) (?\\\\S+) (?.+?(?=\\\\[)|.+?(?=))[^a-zA-Z0-9](?\\\\d{1,7}|)[^a-zA-Z0-9]{1,3}(?.*)$/gm\",\"url\":\"https://regexeditor.dev/authlog-parsing\",\"isPartOf\":{\"@type\":\"WebApplication\",\"name\":\"RegexEditor.dev\",\"url\":\"https://regexeditor.dev\"}}"}],["$","link","11",{"rel":"canonical","href":"https://regexeditor.dev/authlog-parsing"}],["$","meta","12",{"property":"og:title","content":"Auth.log Parsing — PCRE2 Regex Editor"}],["$","meta","13",{"property":"og:description","content":"This regex parses standard auth.log entries, capturing the month, day, time, hostname, process name, PID, and the rest of the message. It handles optional…"}],["$","meta","14",{"property":"og:url","content":"https://regexeditor.dev/authlog-parsing"}],["$","meta","15",{"property":"og:site_name","content":"RegexEditor.dev"}],["$","meta","16",{"property":"og:locale","content":"en_US"}],["$","meta","17",{"property":"og:type","content":"website"}],["$","meta","18",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","19",{"name":"twitter:title","content":"Auth.log Parsing — PCRE2 Regex Editor"}],["$","meta","20",{"name":"twitter:description","content":"This regex parses standard auth.log entries, capturing the month, day, time, hostname, process name, PID, and the rest of the message. It handles optional…"}],["$","link","21",{"rel":"icon","href":"/favicon.ico"}],["$","link","22",{"rel":"icon","href":"/favicon-16x16.png","