Skip to content

Category

Logs tools.

Build and test the patterns that parse your logs, against real sample lines.

Logs tools

When you reach for Logs tools.

Log parsing is regex under adversarial conditions. The pattern works on the three lines you tested and fails on the one with a quoted field containing a space, or an IPv6 address where you assumed dots, or a user agent with a bracket in it.

Testing this against production data has an obvious problem: production logs contain production data. Anything you paste into a hosted regex tester has left your machine, which for access logs means IP addresses and request paths.

These run locally so that is not a consideration, and they show capture groups and named groups as they match, so you can see which part of the line each group actually took — usually the thing you were wrong about.