Get protocol field from regex

my log as follow: system-ip: state:up protocol: ipsec destination-ip:

I want to use regex to get ipsec (protocol field) , may i know the expression for this, thanks


Do you want to succeed in it via terminal looking through a file or using js in a browser?