Regex Tester & Validator

Test, validate and match regular expressions

/\d+:\d+\s+(?:.*?",")(?<user>[^"]+)(?:.*?",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?<src>[^"]+)(?:",")(?<dst>[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?<action>[^"]+)(?:.*?",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?<svc>[^"]+)(?:.*?",")(?<application>[^"]+)(?:.*?",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?:[^"]+)(?:",")(?<ruleName>[^"]+)(?:.*?",")/gmPCRE2+03 years ago✓ Pre-loaded

About this regex

Parses CSV-formatted network device/firewall log lines (e.g., Palo Alto traffic logs) by matching a leading time prefix (\d+:\d+) and skipping unneeded columns via non-capturing groups. It extracts named capture groups for user, src (source IP), dst (destination IP), action, svc (service/port), application, and ruleName. Useful for SIEM ingestion, log mining, and security traffic analysis.

csv log-parsing firewall named-groups network-security

Loading editor…

← Gallerymy_device_usage✨ Emoji Combos

About this regex

csv log-parsing firewall named-groups network-security

Loading editor…