×
 
 
  •  
$helper.renderConfluenceMacro('{bmc-global-announcement:$space.key}')
BMC TrueSight IT Data Analytics 11.3 ... Administering Setting up data collection Setting up data patterns to extract fields

Sample subpatterns

The following table lists sample subpatterns (that are also a part of the product). Included for each subpattern is a description, a matching subpattern expression, matching text examples, and nonmatching text examples. This information will help you understand how to construct new subpatterns or use existing subpatterns when you edit or clone a data pattern.

Related topics

Setting up data patterns to extract fields

Default data patterns

Sample data patterns

Sample date formats

Viewing assistance

  • To see details of a particular subpattern, use the table filter at the top of the table. To clear selection (and see the complete list of subpatterns), select the blank item at the top.
  • Press F to see this page in the full-screen mode, and press Esc to exit the full-screen mode.

Oops, it seems that you need to place a table or a macro generating a table within the Table Filter macro.

The table is being loaded. Please wait for a bit ...

Subpattern nameDescriptionSubpattern expressionMatching text examplesNonmatching text examples
AlphaNumericMatches alphanumeric text and skips any special characters
[A-Za-z0-9]*
  • AbcdXYZ
  • 1233
  • Abc123
  • 1abcd2
  • Abc12xyz

Any text that contains special characters:

~! @ # $ % ^ & * ( ) _ - + = { } [ ] : ” ; ' | \ < > , . ? /

EmailValid email address
[a-zA-Z0-9._%-]
+@[a-zA-Z0-9.-]
+\.[a-zA-Z]
{2,4}
  • john@abc.com
  • john@abc.org
  • john@abc.co.jp
  • John.Davis@abc.com
  • john_Davis@abc.org
  • John-davis@abc.org
  • John%20davis@abc.com
  • john@abc-xyz.com
  • john@
  • john@abc
  • john@abc.c
IntAn integer, optionally prefixed with a plus or minus sign
(?:[+-]?(?:
[0-9]+))
  • 1234
  • 0123
  • +1234
  • -1234
  • + 1234
  • - 1234
  • 1234.00
Base10NumPositive and negative decimal numbers
(?<![0-9.+-])
(?>[+-]?
(?:(?:[0-9]+
(?:\.[0-9]+)?)
|(?:\.[0-9]+)))
  • 0.9
  • 9.9
  • .5
  • .9
  • +3.5
  • -6.8
  • +66.99
Any string other than that mentioned in the matching examples
Base16NumNumber in base-16 format
(?<![0-9A-Fa-f])
(?:[+-]?
(?:0x)?
(?:[0-9A-Fa-f]+))

Any positive or negative numbers:

  • 0xABCD
  • 0x1234
  • +0xAB12
  • 0XABCD
  • X123
  • GABCD
Base16FloatFloat number in base-16 format
\b(?<!
[0-9A-Fa-f.])
(?:[+-]?(?:0x)?
(?:(?:[0-9A-Fa-f]
+(?:\.[0-9A-Fa-f]
*)?)|(?:\.
[0-9A-Fa-f]+)
))\b
  • 0xABCD.1234
  • +0xAB12.12
  • 0xABCD.0x1234
  • 0XABCD.123
PosIntA positive integer with no plus or minus sign
\b(?:[0-9]+)\b
  • 0
  • 1234
  • + 1234
  • +1234
  • -9876
TwoDigitIntTwo-digit integer with no plus or minus sign
[0-9]{2}
  • 00
  • 10
  • 09
  • 0
  • 1
  • 9
  • +10
CiscoMacAddressCisco MAC address
(?:(?:[A-Fa-f0-9]
{4}\.)
{2}[A-Fa-f0-9]
{4})
  • 0Aaf.A109.bcda
  • 1234.5678.9012
  • ABCD.efab.0123
  • ABC.DEF0.1234
  • WXYZ.1234.0923
WindowsMacAddressWindows mac address
(?:(?:[A-Fa-f0-9]
{2}-){5}
[A-Fa-f0-9]{2})
  • AB-cd-Ef-09-90-A0
  • 00-ee-91-be-3e-89
  • abc-09-EE-AF-DF-09
  • xy-09-ab-fd-de-a0
CommonMacCommon MAC address
(?:(?:[A-Fa-f0-9]
{2}:){5}
[A-Fa-f0-9]{2})
  • AB:cd:Ef:09:90:A0
  • 00:ee:91:be:3e:89
  • abc:09:EE:AF:DF:09
  • xy:09:ab:fd:de:a0
MacAddressCisco, Windows, or common MAC address of a machine
(?:%
{CiscoMacAddress}
|%
{WindowsMacAddress}
|%{CommonMac})

Any string that matches:

  • Windows MAC Address
  • Cisco MAC Address
  • Common MAC address
Any string that does not match one of the supported MAC addresses
IpIP address of a machine
(?<![0-9])
(?:(?:25[0-5]
|2[0-4][0-9]|
[0-1]?[0-9]{1,2})
[.](?:25[0-5]
|2[0-4][0-9]
|[0-1]?[0-9]
{1,2})[.]
(?:25[0-5]|2
[0-4][0-9]|[0-1]?
[0-9]{1,2})[.]
(?:25[0-5]|2[0-4]
[0-9]|[0-1]?[0-9]
{1,2}))(?![0-9])
  • 0.0.0.0 through
    255.255.255.255
  • 2001:0000:1234:0000:0000:
    C1C0:ABCD:0876
  • fe80::5d4a:3805:4009:
    c378%14
  • fe80::217:f2ff:fe07:ed62
  • 123e:123e:123e:
    123e:123e:123e::
Any string other than those listed in the matching examples
HostNameName of the machine
\b(?:
[0-9A-Za-z]
[0-9A-Za-z-]
{0,62})(?:\.(?:
[0-9A-Za-z]
[0-9A-Za-z-]
{0,62}))*
(?:\.?|\b)
  • machineName
  • machineName.domain.com
Any string starting with special characters
IpV6IPV6 address of the machine
(?:[0-9a-fA-F]
{1,4}:){7,7}
[0-9a-fA-F]{1,4}
|(?:[0-9a-fA-F]
{1,4}:){1,7}:|
(?:[0-9a-fA-F]
{1,4}:){1,6}:
[0-9a-fA-F]{1,4}|
(?:[0-9a-fA-F]
{1,4}:){1,5}
(?::[0-9a-fA-F]
{1,4}){1,2}|
(?:[0-9a-fA-F]
{1,4}:){1,4}
(?::[0-9a-fA-F]
{1,4}){1,3}|
(?:[0-9a-fA-F]
{1,4}:){1,3}
(?::[0-9a-fA-F]
{1,4}){1,4}|
(?:[0-9a-fA-F]
{1,4}:){1,2}
(?::[0-9a-fA-F]
{1,4}){1,5}|
[0-9a-fA-F]
{1,4}:(?:(?::
[0-9a-fA-F]
{1,4}){1,6})
|:(?:(?::
[0-9a-fA-F]
{1,4}){1,7}|:)
|fe80:(?::
[0-9a-fA-F]
{0,4}){0,4}
%[0-9a-zA-Z]{1,}|::
(?:ffff(?::0{1,4})
{0,1}:){0,1}
(?:(?:25[0-5]|
(?:2[0-4]|1{0,1}
[0-9]){0,1}[0-9]).)
{3,3}(?:25
[0-5]|(?:2[0-4]|
1{0,1}[0-9]){0,1}
[0-9])|(?:
[0-9a-fA-F]
{1,4}:)
{1,4}:(?:(?:25[0-5]|
(?:2[0-4]|1{0,1}
[0-9]){0,1}[0-9]).)
{3,3}(?:25[0-5]|
(?:2[0-4]|1{0,1}
[0-9]){0,1}[0-9])
fe80::2ed4:44ff:
feb5:8ec1		Not applicable
IpOrHostValid host name, IP address, or IPv6 address
(?:%{HostName}|
%{Ip}|%{IpV6})
  • 0.0.0.0 through
    255.255.255.255
  • machinename
  • machinename.domain.com
  • fe80::2ed4:44ff:feb5:8ec1
Not applicable
UnixFilePathFile path on a UNIX machine
(?<![\w\\/])
(?:/(?:[\w_
%!$@:.,-]+
|\\.)*)+
  • /home/admin
  • /opt/com/product/folder1/../folder2
  • ../bin
  • ./bin
WindowsFilePathFile path on a Windows machine
(?:[A-Za-z]+:|\\)
(?:\\[^\\?*]*)+
  • c:/directory1/
  • \\shared\folder
  • z:/abcd
shared
FilePathUNIX or Windows file path
(?:%{UnixFilePath}|
%{WindowsFilePath}

 

All samples shown for
UnixFilePath
or WindowsFilePath
subpatterns

Examples:

  • /home/admin
  • c:/directory1/
Not applicable
MonthCalendar month in short form (first three letters) or full form
\b(?:Jan(?:uary)?|
Feb(?:ruary)?
|Mar(?:ch)?|Apr
(?:il)?|May|Jun
(?:e)?|Jul(?:y)?
|Aug(?:ust)?
|Sep(?:tember)?
|Oct(?:ober)?
|Nov(?:ember)
?|Dec(?:ember)?)\b
  • Jan
  • Feb
  • Mar
  • Nov
  • Dec
  • January
  • February
  • December
Any string other than those listed in the matching  examples
MonthNumCalendar month in numbers, where 1 is January and 12 is December
(?:0?[1-9]|1[0-2])
  • 01 (or 1)
  • 02 (or 2)
  • 03 (or 3)
  • 04 (or 4)
  • 05 (or 5)
  • 06 (or 6)
  • 07 (or 7)
  • 08 (or 8)
  • 09 (or 9)
  • 10
  • 11
  • 12
Any string other than those listed in the matching examples
MonthDayDay of the month as a number
%{DigitDay}
  • 01 (or 1)
  • 02 (or 2)
  • 03 (or 3)
  • 04 (or 4)
  • 05 (or 5)
  • 06 (or 6)
  • 07 (or 7)
  • 08 (or 8)
  • 09 (or 9)
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
Any string other than those listed in the matching examples
DayDay of the week in short form (first three letters) or full form
(?:Mon(?:day)?
|Tue(?:sday)?|
Wed(?:nesday)?
|Thu(?:rsday)?|
Fri(?:day)?|
Sat(?:urday)?
|Sun(?:day)?)
  • Mon
  • Tue
  • Wed
  • Thu
  • Monday
  • Saturday
  • Sunday
Any string other than those listed in the matching examples
DigitDayDay of the month as a number
(?:\s[1-9]|[1-9]|
0[1-9]|[1-2]
[0-9]|3[01])
  • 01 (or 1)
  • 02 (or 2)
  • 03 (or 3)
  • 04 (or 4)
  • 05 (or 5)
  • 06 (or 6)
  • 07 (or 7)
  • 08 (or 8)
  • 09 (or 9)
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
Any string other than those listed in the matching examples
FullYearYear in numbers, in 4-digit representation
[1-9][0-9]{3}
1000 through 9999Any string other than those listed in the matching examples
Hour

Hour in both 12-hour and 24-hour format

Handles both single-digit and double-digit representation

(?:2[0123]|
[01][0-9]|[0-9])
  • 0 through 9
  • 00 through 09
  • 10 through 19
  • 20 through 23
Any string other than those listed in the matching examples
Minute

Minutes in the hour

Handles double-digit representation only

(?:[0-5][0-9])
00 through 59Any string other than those listed in the matching examples
Second

Seconds in the minute

Also capable of handling milliseconds

(?:(?:[0-5]
[0-9]|60)
(?:[.,][0-9]+)?)
  • 00 through 60
  • 00 through 60,
    followed by comma (,)
    or period (.),
    followed by 0 through 9
    one or more times
Any string other than those listed in the matching examples
TimeTime of the day in hours, minutes, seconds, and milliseconds format
(?!<[0-9])
%{Hour}:
%{Minute}
(?::%{Second})
(?![0-9])
Not applicableNot applicable
TzTime zone in short form
(?:[PMCE][SD]T)
  • PST
  • PDT
  • MST
  • MDT
  • CST
  • CDT
  • EST
  • EDT
Any string other than those listed in the matching examples
Timezone

Time zone in short form, numbers, and so on

This regular expression is intentionally made more flexible than required

[A-Za-z]{3}|
[0-9A-Za-z]{4,}\
s[0-9A-Za-z]+\s
[0-9A-Za-z]+|
[+-]%{Hour}
%{Minute}
  • +0000 through +2359
  • -0000 through -2359
  • PST
  • EDT
Any string other than those listed in the matching examples
Data

Matches any string.

It is very useful to capture a dynamic list of inputs for a field; when you are not aware of all the possible values of the field.

BMC recommends you to use this subpattern when the string for which the field is being captured is succeeded by a clear delimiter.

Note: The field value must not contain the delimiter.

.*?

Any string succeeded by a clear delimiter including alpha-numeric characters and special characters

In the following example, you can use this subpattern to capture the string "DEBUG" where space ( ) appearing after the string acts as a delimiter.

06/18/2014
:ServiceEntry
DEBUG : queue count 1

Any string which is not succeeded by a clear delimiter or a string that contains the same character that you want to use as a delimiter

In the following example, if you want to capture the string "queue count" using space ( ) as the delimiter, then this subpattern must not be used.

06/18/2014
05:37:47
:ServiceEntry
DEBUG : queue
count 1


Was this page helpful? Yes No Submitting... Thank you
Last modified by Sonali Deshmukh on Oct 12, 2017
reference data_patterns administration

Comments

Log in or register to comment.

Sample data patterns
Sample date formats
© Copyright 2014 - 2019 BMC Software, Inc.
Legal notices

Powered by Atlassian Confluence and Scroll Viewport

© Copyright 2005-2024 BMC Software, Inc. Use of this site signifies your acceptance of BMC’s Terms of Use . BMC, the BMC logo, and other BMC marks are assets of BMC Software, Inc. These trademarks are registered and may be registered in the U.S. and in other countries.