Aug 22 11:46:27 masterudp003210uds.netops.msnyuhealth.org 148526: Aug 22 15:46:26 UTC: %SEC-6-IPACCESSLOGDP: list 101 denied icmp 10.4.12.253 -> 10.7.151.48 :8/0:, 1 packet
####
my $dtg=qr@[A-Z][a-z]+\s\d+\s\d+:\d+:\d+@;
my $thingy=qr([\.\d]+);
my $tz=qr([A-Z]{3});
my $ipaddr=qr@\d+\.\d+\.\d+\.\d+@;
my $fqdn=qr@[a-zA-Z\-\.]+@;
my $timezone = qr@[A-Z]+@;
my $fragger = qr@(\%SEC-6-IPACCESSLOGP|\%SEC-6-IPACCESSLOGDP)@;
my $list=qr@list\s(\d+)@;
my $protocol = qr@(tcp|udp|icmp)@;
my $ip_with_port=qr@($ipaddr):(\d+):@;
my $arrow = qr @\-\>@;
my $time_lapse=qr@\d+d\d+h@; # Something like 6d45h
my $metric_ex=qr(\d+:);
my $dtg1="Aug 22 11:46:27";
my $month="Aug";
my $monthDay="Aug 22";
my $time="11:46:27";
my $matchMonth=qr([A-Z][a-z]+);
my $dateMatch=qr($matchMonth\s\d+);
my $matchTime=qr(\d+:\d+:\d+);
####
printf "Full String: %s\n",(
$full_string =~ m@
($dateMatch\s$matchTime)\s
($fqdn|$ipaddr)\s
$metric_ex\s
($dateMatch\s$matchTime)\s
($timezone):\s
$fragger:\s
list\s(\d+)\s
denied\s($protocol)\s
($ipaddr)\s
$arrow\s
($ipaddr)\s
:\d+\/\d+\:,\s
(\d+)\spacket
@x
?
"OK":"FAILED"
);