Regex Tester & Validator

Parses Sophos firewall/UTM web filtering log entries using named capture groups to extract the syslog timestamp, device name, source IP, username, HTTP method, requested URL, user agent, full URL, domain, and destination (target) IP. Flexible key=value matching with lazy quantifiers accommodates variable log content. Commonly used in SIEM ingestion, network security monitoring, and web traffic analysis to structure Sophos appliance logs.