Regex pattern match failure

Question

I am not able to match a pattern in logstash grok. Here is my data:

some words key[value]some words in between key[value] key[value]....some more words

I want to match a pattern

key[value] key[value]

i.e. two consecutive key values with space in between

I tried with (?=\w+[.*])\s(?=\w+[.*]), but it's not working.

I am getting the entire line with the very first key[value] and not from key[value] key[value].

`\w+\[\w+\]\s\w+\[\w+\]`? Demo: https://regex101.com/r/u3O82v/1 — 41686d6564 stands w. Palestine, Jul 06 '19 at 23:29
(?=\w+\[.*\]\s\w+\[.*\]) didnt work when i tried to do look ahead — Ravi, Jul 06 '19 at 23:35
You need to escape the `[` character because it has a special meaning, that is, the [character class](https://www.regular-expressions.info/charclass.html) `[]`. — 41686d6564 stands w. Palestine, Jul 06 '19 at 23:37
yes, I did. somehow it is not capturing here. Also, I need to use .* between square brackets as value will have non word characters as well. — Ravi, Jul 07 '19 at 00:01
Try `(?\w+\[[^\]\[]*])\s+(?\w+\[[^\]\[]*])` ([demo](https://regex101.com/r/FJ4ZNR/1)) — Wiktor Stribiżew, Jul 07 '19 at 12:31

Emma · Answer 1 · 2019-07-07T05:45:04.063

0

I'm guessing that positive lookahead is unnecessary and this expression might work:

[A-Za-z0-9]+\[[A-Za-z0-9]+\]\s[A-Za-z0-9]+\[[A-Za-z0-9]+\]

Or:

(?<=[^a-z])\s(\S+\[[^]]+\])

edited Jul 07 '19 at 05:45

answered Jul 06 '19 at 23:34

Emma

score 0 · Answer 2 · answered Jul 07 '19 at 10:14

0

\S+\[[^\[]+\]

Means any non-space character follows by [, follows by any character except [ which repeat more than one time and follows by ]

answered Jul 07 '19 at 10:14

Hamed Ghasempour

2 Answers2