简单或正则表达

Question

I have a number of strings from my log file which I want to filter by regexp:

Oct 21 08:05:27 ph10001019 phs: got valid password for flat 200
Oct 21 08:07:34 ph10001014 phs: got valid password for flat 200
Oct 21 08:08:05 ph10001014 phs: got valid password for flat 200
Oct 21 08:19:25 ph10001019 phs: got valid password for flat 200: 1234
Oct 21 08:22:13 ph10001019 phs: got valid password for flat 200: 1234
Oct 21 08:24:12 ph10001019 phs: got valid password for flat 200: 1234
Oct 21 08:26:41 ph10001014 phs: got valid password for flat 200: 0034

This regexp returns string I need:

phs:\sgot\svalid\spassword.*200:\s0034

That's fine but I have two variants of last number. I tried folowing regexp but it returns empty string.

phs:\sgot\svalid\spassword.*200:\s(0034)|(4321)

What's wrong with second regexp?

Answer 1

I think you want to match only the last string. Avoid using \s for matching whitespace because \s would match newline characters also.

phs:\h+got\h+valid\h+password.*?200:\h+(?:0034|4321)

DEMO

$data = <<< EOT
Oct 21 08:05:27 ph10001019 phs: got valid password for flat 200
Oct 21 08:07:34 ph10001014 phs: got valid password for flat 200
Oct 21 08:08:05 ph10001014 phs: got valid password for flat 200
Oct 21 08:19:25 ph10001019 phs: got valid password for flat 200: 1234
Oct 21 08:22:13 ph10001019 phs: got valid password for flat 200: 1234
Oct 21 08:24:12 ph10001019 phs: got valid password for flat 200: 1234
Oct 21 08:26:41 ph10001014 phs: got valid password for flat 200: 0034
EOT;
preg_match_all('~phs:\h+got\h+valid\h+password.*?200:\h+(?:0034|4321)~', $data, $match);
print_r($match);

Output:

Array
(
    [0] => Array
        (
            [0] => phs: got valid password for flat 200: 0034
        )

)