정규표현식 예제

(?:<VirtualHost\s+(.*)>)((?:(?!</VirtualHost>).*\n?)+)

postgresql log

\[([^\]]*)\] (?:\[([^\]]*)\] )?(\d{4}-\d\d-\d\d \d\d:\d\d:\d\d \w*) (?:(.*)\((\d+)\))?\[(\d*)\]: \[(.*)\] (\w*):\s+(?:duration: ([\d.]*) ms\s+statement:((?:(?!\[.*\] \d{4}-\d\d-\d\d \d\d:\d\d:\d\d \w*).*\n?)+)?)?((?:(?!\[.*\] \d{4}-\d\d-\d\d \d\d:\d\d:\d\d \w*).*\n?)*)

php error log

\[([^\]]*)\] (?:\[([^\]]*)\] )?\[(\d\d-\w\w\w-\d\d\d\d \d\d:\d\d:\d\d)(?: [\w/]+)?\] PHP ([^:]+):\s+((?:(?!\[.*\] \[\d\d-\w\w\w-\d\d\d\d \d\d:\d\d:\d\d(?: [\w/]+)?\]).*\n?)+)

iptables log

\[([^\]]*)\] (\w\w\w [\s\d]\d \d\d:\d\d:\d\d) (\w+) (\w+): (?::\s*)?([\w -]*):\s*(?:IN=(\w*) )?(?:OUT=(\w*) )?(?:MAC=([\w:]*) )?(?:SRC=([\w\.]*) )?(?:DST=([\w\.]*) )?(?:LEN=(\d*) )?(?:TOS=(\w*) )?(?:PREC=(\w*) )?(?:TTL=(\d*) )?(?:ID=(\d*) )?(?:(CE|DF|MF) )?(?:PROTO=(\w*) )?(?:TYPE=(\d*) )?(?:CODE=(\d*) )?(?:(\[.*\]) ?)?(?:ID=(\d*) )?(?:SEQ=(\d*) ?)?(?:SPT=(\d*) )?(?:DPT=(\d*) )?(?:LEN=(\d*) ?)?(?:WINDOW=(\d*) )?(?:RES=(\w*) )?(?:((?:CWR ?|ECE ?|URG ?|ACK ?|PSH ?|RST ?|SYN ?|FIN ?)+) )?(?:URGP=(\d*) ?)?((?:(?!\[.*\] \w\w\w [\s\d]\d \d\d:\d\d:\d\d).*)+)

httpd error log

\[([^\]]*)\]\s+(?:\[([^\]]*)\] )?\[(\w{3} \w{3} \d\d \d\d:\d\d:\d\d \d{4})\]\s+\[([^\]]*)\]\s+(?:(?:\[client\s+([^\]]*)\])\s+)?((?:(?!\[([^\]]*)\]\s+(?:\[([^\]]*)\] )?\[(\w{3} \w{3} \d\d \d\d:\d\d:\d\d \d{4})\]).*\n?)*)

nginx error log

\[([^\]]*)\]\s+(?:\[([^\]]*)\] )?(\d{4}/\d\d/\d\d \d\d:\d\d:\d\d)\s+\[([^\]]*)\]\s+([^:]*):\s+(\*\d+)\s+([^,]*),\s+client:\s+([^,]*),\s+server:\s([^,]*),\s+request:\s+(\"[^\"]*\"),\s+host:\s+(\"[^\"]*\")(?:,\s+referrer:\s+(\"[^\"]*\"))?

xferlog

\[([^\]]*)\]\s+(?:\[([^\]]*)\] )?(\w{3} \w{3} [\s\d]\d \d\d:\d\d:\d\d \d{4})\s+(\d+)\s+([^\s]*)\s+(\d+)\s+([^\s]*)\s+(\w)\s+(\w)\s+(\w)\s+(\w)\s+([^\s]*)\s+([^\s]*)\s+(\d)\s+([^\s]*)\s+(\w)