Logs
Syslog (RFC 5424)
Parses RFC 5424 syslog messages.
Try it in RegexPro →Available in
Pattern
regexengine-agnostic
^<(\d{1,3})>(\d+) (\S+) (\S+) (\S+) (\S+) (\S+) (.*)$Raw source: ^<(\d{1,3})>(\d+) (\S+) (\S+) (\S+) (\S+) (\S+) (.*)$
How it works
Captures priority, version, timestamp, hostname, app-name, procid, msgid, and message content from standard structured syslog entries.
Examples
Input
<165>1 2023-10-11T22:14:15.003Z mymachine.example.com evntslog - ID47 - Application eventMatches
<165>1 2023-10-11T22:14:15.003Z mymachine.example.com evntslog - ID47 - Application event
Common use cases
- •Log aggregation
- •SIEM tools
- •Cloud observability
Related patterns
Apache Common Log Format
LogsParses Apache Common Log Format entries.
Nginx Error Log
LogsParses Nginx error log lines.
CloudWatch Log Stream Path
LogsMatch AWS CloudWatch log group / stream paths like `/aws/lambda/my-function` or `/aws/ecs/cluster-name`.
Java Stack Trace Line
LogsMatches a single Java stack trace frame line.