I took this:

$_ = qq{133.133.133.133, 87.87.87.87 127.0.0.1 - - [21/Apr/2012:04:35: +01 +0200] "GET /seo/vbseocp.php HTTP/1.0" 404 300 "-" "Internet Explo +rer 6.0" 95.95.95.95, 87.87.87.87 127.0.0.1 - - [22/Apr/2012:04:00:43 + +0200] "GET / HTTP/1.0" 200 10211 "http://yandex.ru/yandsearch?text= +example.com" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; +)"}; m/^(\S+)\, (\S+) (\S+) \- \- \[(\d{2})\/(\w+)\/(\d{4})\:(\d{2})\:(\d{2 +})\:(\d{2})\+(\d{4})\] \"\S+\" (\d{3}) (\d+|-) \"(.*?)\" \"\.*?\"$/; print map { "[$_]\n" } $1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13;

And tweaked your expression down to this:

m@^(\S+?), (\S+) (\S+) - - \[(\d{2})/(\w+)/(\d{4}):\s*(\d{2}):(\d{2}): +\s*(\d{2}) \+(\d{4})\] ".*?" (\d{3}) (\d+) "(.*?)" "(.*?)"@; # 1 2 +3 4 5 6 7
  1. I made \S non-greedy, to not gobble up the comma.
  2. I changed one literal space to \s* (Your example doesn't have spaces.)
  3. Same as #2.
  4. I changed "greedy non-whitespace" (which was failing b/c the string within has whitespace) to "non-greedy non-quotes"
  5. I don't know what you intended with "(\d+|-)"...
  6. Again, non-greedy non-quotes - I think that's what you wanted.
  7. I removed the end-of-line anchor ($), because you aren't currently matching to the end.

Also note I changed the delimiter to something NOT in your content, so it doesn't need to be escaped. And I did NOT escape these other characters: -:"

Update: My numbered notes line up if you click 'download'.


In reply to Re: Log regexp by hbm
in thread Log regexp by kazak

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":



  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.