{"id":19016,"date":"2020-08-24T13:57:07","date_gmt":"2020-08-24T13:57:07","guid":{"rendered":"https:\/\/merikebi.warrenmyers.com\/?p=19016"},"modified":"2020-08-24T13:57:07","modified_gmt":"2020-08-24T13:57:07","slug":"answer-by-warren-for-regex-separate-ipport-from-a-log","status":"publish","type":"post","link":"https:\/\/merikebi.warrenmyers.com\/?p=19016","title":{"rendered":"Answer by warren for Regex separate IP:Port from a log"},"content":{"rendered":"

Here’s a regex that will pull all of the ip:port values from a field:<\/p>\n

| rex field=_raw max_match=0 "(?<ip_port>\\d+\\.\\d+\\.\\d+\\.\\d+\\:\\d+)"\n<\/code><\/pre>\n
Now expand the ip_port<\/code> field:<\/p>\n
| mvexpand ip_port\n<\/code><\/pre>\n
And then extract from ip_port<\/code> into ip<\/code> & port<\/code>:<\/p>\n
| rex field=ip_port "(?<ip>\\d+\\.\\d+\\.\\d+\\.\\d+\\)\\:(?<port>\\d+)"\n<\/code><\/pre>\n
from User warren – Stack Overflow https:\/\/stackoverflow.com\/questions\/63536430\/regex-separate-ipport-from-a-log\/63562264#63562264
\nvia IFTTT<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Here’s a regex that will pull all of the ip:port values from a field: | rex field=_raw max_match=0 "(?<ip_port>\\d+\\.\\d+\\.\\d+\\.\\d+\\:\\d+)" Now expand the ip_port field: | mvexpand ip_port And then extract from ip_port into ip & port: | rex field=ip_port "(?<ip>\\d+\\.\\d+\\.\\d+\\.\\d+\\)\\:(?<port>\\d+)" from User warren – Stack Overflow https:\/\/stackoverflow.com\/questions\/63536430\/regex-separate-ipport-from-a-log\/63562264#63562264 via IFTTT<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4],"tags":[991],"keyring_services":[],"class_list":["post-19016","post","type-post","status-publish","format-standard","hentry","category-blih","tag-stackexchange"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/19016","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19016"}],"version-history":[{"count":1,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/19016\/revisions"}],"predecessor-version":[{"id":19017,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/19016\/revisions\/19017"}],"wp:attachment":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19016"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19016"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19016"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fkeyring_services&post=19016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}