You can type regular expressions in text boxes for field values to extract fields from log events.

Examples of Regular Expressions

Regular Expression

Description

[xyz]

x, y, or z

(info|warn|error)

info, warn, or error

[a-z]

A lowercase letter

[^a-z]

Not a lowercase letter

[a-z]+

One or more lowercase letters

[a-z]*

Zero or more lowercase letters

[a-z]?

Zero or one lowercase letter

[a-z] {3}

Exactly three lowercase letters

[\d]

A digit

\d+$

One or more digits followed by end of message

[0-5]

A number from 0 to 5

\w

A word character (letter, digit, or underscore)

\s

White space

\S

Any character except white space

[a-zA-Z0-9]+

One or more alphanumeric characters

([a-z] {2,} [0-9] {3,5})

Two or more letters followed by three to five numbers