title: In regex parse of sumo logic, how can I allow for and throw away wildcards?
body: <p>Consider an access log of a REST API, you will see lines (simplified) that looks like this:</p>
  
  <pre><code>2017-01-01T12:12:41Z "GET /api/posts" HTTP/1.1 200 "-"
  2017-01-01T12:12:42Z "GET /api/posts/56/comments" HTTP/1.1 200 "-"
  2017-01-01T12:12:42Z "GET /api/posts" HTTP/1.1 200 "-"
  2017-01-01T12:12:56Z "POST /api/posts" HTTP/1.1 202 "Safari"
  2017-01-01T12:12:58Z "GET /api/posts/134/comments" HTTP/1.1 200 "-"
  </code></pre>
  
  <p>To parse that you could write something like :</p>
  
  <pre><code>_collector=access.log | regex parse "(?&lt;method&gt;[A-Z]+) /api/(?&lt;path&gt;[\w\d\/]+) HTTP"
  </code></pre>
  
  <p>This would extract METHOD and PATH form the log lines, BUT you would see these unique values:</p>
  
  <ul>
  <li>GET posts</li>
  <li>POST posts</li>
  <li>GET posts/56/comments</li>
  <li>GET posts/134/comments</li>
  </ul>
  
  <p>I wish to throw away all the dynamic parts of the url, so I could find the following instead:</p>
  
  <ul>
  <li>GET posts</li>
  <li>POST posts</li>
  <li>GET posts/{id}/comments</li>
  </ul>
  
  <p>I could figure out this in a search and replace regex easily enough, but is it even possible in Sumologic?</p>