You can type regular expressions in text boxes for field values to extract fields from log events.

Examples of Regular Expressions

Regular Expression



x, y, or z


info, warn, or error


A lowercase letter


Not a lowercase letter


One or more lowercase letters


Zero or more lowercase letters


Zero or one lowercase letter

[a-z] {3}

Exactly three lowercase letters


A digit


One or more digits followed by end of message


A number from 0 to 5


A word character (letter, digit, or underscore)


White space


Any character except white space


One or more alphanumeric characters

([a-z] {2,} [0-9] {3,5})

Two or more letters followed by three to five numbers