Regex to get the words after matching string

Question

Below is the content   Subject      Security ID         S-1-5-21-3368353891-1012177287-890106238-22451     Account Name        ChamaraKer     Account Domain      JIC     Logon ID        0x1fffb  Object      Object Server   Security     Object Type     File     Object Name     D  ApacheTomcat apache-tomcat-6 0 36 logs localhost 2013-07-01 log     Handle ID   0x11dc   I need to capture the words after the Object Name  word in that line  Which is D  ApacheTomcat apache-tomcat-6 0 36 logs localhost 2013-07-01 log   How can I do this       bObject Name b    matches - Object Name

User · Answer

You re almost there  Use the following regex  with multi-line option enabled    bObject Name  s         The complete match would be  Object Name    D  ApacheTomcat apache-tomcat-6 0 36 logs localhost 2013-07-01 log   while the captured group one would contain  D  ApacheTomcat apache-tomcat-6 0 36 logs localhost 2013-07-01 log     If you want to capture the file path directly use    m    lt   bObject Name

User · Answer

The following should work for you     n r   Object Name  s     n r      Working example  Your desired match will be in capture group 1       n r    t  Object Name    t      n r      Would be similar but not allow for things such as   blah Object Name  blah  and also make sure that not to capture the next line if there is no actual content after  Object Name

User · Answer

But I need the match result to be     not in a match group      For what you are trying to do  this should work   K resets the starting point of the match    bObject Name  s  K S    You can do the same for getting your Security ID matches    bSecurity ID  s  K S

User · Answer

This might work out for you depending on which language you are using      lt  Object Name       It s a positive lookbehind assertion  More information could be found here   It won t work with JavaScript though  In your comment I read that you re using it for logstash  If you are using GROK parsing for logstash then it would work  You can verify it yourself here   https   grokdebug herokuapp com

User · Answer

This is a Python solution   import re  line     Subject      Security ID         S-1-5-21-3368353891-1012177287-890106238-22451     Account Name        ChamaraKer     Account Domain      JIC     Logon ID        0x1fffb  Object      Object Server   Security     Object Type     File     Object Name     D  ApacheTomcat apache-tomcat-6 0 36 logs localhost 2013-07-01 log     Handle ID   0x11dc       regex    r Object Name  s        match1  re findall regex line  print  match1       Remote Interpreter Reinitialized       gt  gt  gt     D   ApacheTomcat x07pache-tomcat-6 0 36  logs  localhost 2013-07-01 log    gt  gt  gt

User · Answer

Here s a quick Perl script to get what you need  It needs some whitespace chomping      bin perl   sample    lt  lt END  Subject    Security ID         S-1-5-21-3368353891-1012177287-890106238-22451   Account Name        ChamaraKer   Account Domain      JIC   Logon ID        0x1fffb  Object    Object Server   Security   Object Type     File   Object Name     D   ApacheTomcat  apache-tomcat-6 0 36  logs  localhost 2013- 07-01 log   Handle ID   0x11dc END  my  sample lines   split   n    sample  my  path   foreach my  line   sample lines        path     line    m Object Name    s    g    if  path        print  path     n

[regex] Regex to get the words after matching string

Examples related to regex

Examples related to expression

Examples related to regex-negation

Examples related to regex-lookarounds