Regex Editor & Tester

Build, test, and debug regular expressions

/^(?<time>[^ ]* [^ ]* [^ ]*) (?<host>[^ ]*) date=(?<forti_date>[^ ]*) time=(?<forti_time>[^ ]*) devname=(?<dev_name>[^ ]*) device_id=(?<dev_id>[^ ]*) log_id=(?<log_id>[^ ]*) type=(?<type>[^ ]*) subtype=(?<subtype>[^ ]*) pri=(?<pri>[^ ]*) vd=(?<vd>[^ ]*) src=(?<src>[^ ]*) src_port=(?<src_port>[^ ]*) src_int="(?<src_int>[^ ]*)" dst=(?<dst>[^ ]*) dst_port=(?<dst_port>[^ ]*) dst_int="(?<dst_int>[^ ]*)" SN=(?<SN>[^ ]*) status=(?<status>[^ ]*) policyid=(?<policy_id>[^ ]*) dst_country="(?<dst_country>[^ ]*)" src_country="(?<src_country>[^ ]*)" service=(?<service>[^ ]*) proto=(?<proto>[^ ]*) duration=(?<duration>[^ ]*) sent=(?<sent>[^ ]*) rcvd=(?<rcvd>[^ ]*)$/PCRE+010 years ago✓ Pre-loaded

About this regex

Matches FortiGate firewall syslog entries for traffic/connection logs. Extracts comprehensive fields including timestamps, source/destination IPs, ports, interfaces, countries, and traffic statistics using named capture groups. Useful for SIEM integration and centralized firewall log analysis.

fortigate syslog firewall network-security log-parsing

Loading editor…

← Galleryfortigate syslog✨ Emoji Combos

About this regex

fortigate syslog firewall network-security log-parsing

Loading editor…