"Customer Informed zinac 23. 2. 2018, 16:25:12 | The maximum IP's bla bla observed. ntapn 27. 2. 2018, 18:39:43 | This was closed with reason: Non-Issue. Notes: The maximum IP's seen was of cloudfare, amazon and akamai. bla 2018, 18:40:04"

"This was closed with reason: Non-Issue. Notes: These offenses were raiseoft apps. ntapn 1. 3. 2018, 20:19:16 | This trafficmachine The traffic tot 75 is being initiated by the ltsvc.exe process. The traffic being denied to other multiple port 80 and 443 are initiated by the sophos antivirus digital and globalsign sites. ntapn 28. 2. 2018, 12:39:17 | Customer Informed zinbc 23. 2. 2018, 16:25:12"

"No suspicious traffic observed. The system belonged to the wifi segment. The IP's belonged tblaervers. The | major traffic was seen for the avast server. No more communications was observed after 23rd Feb. | ntapn 27. 2. 2018, 15:09:48 | Customer Informed zinbc 23. 2. 2018, 16:25:12 | This offense was closed with reason: Non-Issue. Comunications was observed after 23rd Feb. -NTAPN ntapn 27. 2. 2018, 15:10:08"


mam taketo 3 string kazdy na jednom riadku zaciatok " medzi je | (sekcis moze byt 3 a viac) a koniec je " v jednotlivych sekcia je string zin[a-z]{2} pomocou ktoreho chcem matchnut celu jednu sekciu teda medzi " a | alebo | a | alebo koniec teda | a ". prva seckia je fajn. Problem je so strednout pretoze pretoze tam neviem dojst na to aky by som matchol iba prvy delimiter | ale ono to zoberie aj dalsie a zastavi sa na posledno cize oznaci aj viac sekci taky isty je problem aj pri poslednej kde defacto staci oznacit ["] ale tiez zoberie aj viac | (ten isty princip ten isty problem)

takto som to urobil:

" prva sekcia | stredna sekcia | posledna sekcia "
(["](.*)Wzin[a-z]{2}(W(.*?)[|])) | ([|](.*)Wzin[a-z]{2}W(.*?)[|]) | (([|](.*)Wzin[a-z]{2})W(.*?)["])

problem bude niekde s [|](.*) ale neviem uz s tym pohnut :/ dik