RunspaceId : d3dbe55b-b0c2-48ef-8f49-0f30ebd553aa
ObjectModified : test
CmdletName : New-Mailbox
CmdletParameters : {ResetPasswordOnNextLogon, Alias, Password, UserPrincipalName, Database, SamAccountName, LastName, Organizat
ionalUnit, Initials, FirstName, Name}
ModifiedProperties : {}
Caller : TEst.Admin
Succeeded : True
Error :
RunDate : 2014/3/24 10:01:49
OriginatingServer : TEST(15.00.0775.022)
Identity : RgAAAABRB0jEnPi7SZ46Wv3WKUahBwAfCsv7xh/zT66wYhIbLojWAAAAb1GrAABdb7eQEuSqQ5aHAWignShgAAAAACmAAAAJ
IsValid : True
现需要将以上文本以:为分隔提取后面的值信息,因为开发的通用日志解析工具是通过正则来提取数据的,这样就需要把这个数据块中特征通过正则表示出来,然后提取特征之后的数据,研究了大半天后来终于给写出来了,好费劲,正则不熟啊,记录一下:
(?:RunspaceId : )(?[\s\S]*)
(?:ObjectModified : )(?[\s\S]*)
(?:CmdletName : )(?[\s\S]*)
(?:CmdletParameters : )(?[\s\S]*)
(?:ModifiedProperties : )(?[\s\S]*)
(?:Caller : )(?[\s\S]*)
(?:Succeeded : )(?[\s\S]*)
(?:Error : )(?[\s\S]*)
(?:RunDate : )(?[\s\S]*)
(?:OriginatingServer : )(?[\s\S]*)
(?:Identity : )(?[\s\S]*)
(?:IsValid : )(?.*)