topic RegEx Help - how to extract the numbers from string? in Other Usage

topic RegEx Help - how to extract the numbers from string? in Other Usage https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647705#M754 <P>Hi,</P> <P>For given sample data set, how can I extract all the numbers (will be always 3 digits) from desc?</P> <P> </P> <P> </P> <P> </P> <LI-CODE lang="markup">| makeresults | eval desc="Frankfurt (123) & Saarbrucken (456), Germany - Primary down / Secondary down" | append [| makeresults | eval desc="Frankfurt (123), Saarbrucken (456), Frankfurt Zeil (789) & Kaiserslautern (012), Germany - Primary up / Secondary up"] | append [| makeresults | eval desc="Test - Creteil - (123) - France - Primary Up // Secondary Up"] | append [| makeresults | eval desc="All devices at 456 London, England are alerting as down and unreachable"] | append [| makeresults | eval desc="Test - 123-Clonmel ( Ireland) - Primary DOWN / Secondary UP/ Switch UP"]</LI-CODE> <P> </P> <P> </P> <P> </P> <P> </P> <P>output required:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="madhav_dholakia_0-1687328137734.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25934iE5A9BF85F84C3CF0/image-size/medium?v=v2&px=400" role="button" title="madhav_dholakia_0-1687328137734.png" alt="madhav_dholakia_0-1687328137734.png" /></span></P> <P> </P> <P>can you please suggest regex I can use for the same?</P> <P>Thank you.</P> Thu, 22 Jun 2023 05:45:59 GMT madhav_dholakia 2023-06-22T05:45:59Z RegEx Help - how to extract the numbers from string? https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647705#M754 <P>Hi,</P> <P>For given sample data set, how can I extract all the numbers (will be always 3 digits) from desc?</P> <P> </P> <P> </P> <P> </P> <LI-CODE lang="markup">| makeresults | eval desc="Frankfurt (123) & Saarbrucken (456), Germany - Primary down / Secondary down" | append [| makeresults | eval desc="Frankfurt (123), Saarbrucken (456), Frankfurt Zeil (789) & Kaiserslautern (012), Germany - Primary up / Secondary up"] | append [| makeresults | eval desc="Test - Creteil - (123) - France - Primary Up // Secondary Up"] | append [| makeresults | eval desc="All devices at 456 London, England are alerting as down and unreachable"] | append [| makeresults | eval desc="Test - 123-Clonmel ( Ireland) - Primary DOWN / Secondary UP/ Switch UP"]</LI-CODE> <P> </P> <P> </P> <P> </P> <P> </P> <P>output required:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="madhav_dholakia_0-1687328137734.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25934iE5A9BF85F84C3CF0/image-size/medium?v=v2&px=400" role="button" title="madhav_dholakia_0-1687328137734.png" alt="madhav_dholakia_0-1687328137734.png" /></span></P> <P> </P> <P>can you please suggest regex I can use for the same?</P> <P>Thank you.</P> Thu, 22 Jun 2023 05:45:59 GMT https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647705#M754 madhav_dholakia 2023-06-22T05:45:59Z Re: RegEx Help - how to extract the numbers from string https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647707#M755 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/65114">@madhav_dholakia</a> </P><P>Can you please try the below search?</P><LI-CODE lang="markup">YOUR_SEARCH | rex field=desc "(?<loc>\d+)" max_match=0 | eval loc = mvjoin(loc,",")</LI-CODE><P> </P><P><STRONG>My Sample Search :</STRONG></P><LI-CODE lang="markup">| makeresults | eval desc="Frankfurt (123) & Saarbrucken (456), Germany - Primary down / Secondary down" | append [| makeresults | eval desc="Frankfurt (123), Saarbrucken (456), Frankfurt Zeil (789) & Kaiserslautern (012), Germany - Primary up / Secondary up"] | append [| makeresults | eval desc="Test - Creteil - (123) - France - Primary Up // Secondary Up"] | append [| makeresults | eval desc="All devices at 456 London, England are alerting as down and unreachable"] | append [| makeresults | eval desc="Test - 123-Clonmel ( Ireland) - Primary DOWN / Secondary UP/ Switch UP"] | rex field=desc "(?<loc>\d+)" max_match=0 | eval loc = mvjoin(loc,",") |table loc</LI-CODE><P> </P><P>I hope this will help you.</P><P>Thanks<BR />KV<BR />If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.</P><P> </P> Wed, 21 Jun 2023 06:28:57 GMT https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647707#M755 kamlesh_vaghela 2023-06-21T06:28:57Z Re: RegEx Help - how to extract the numbers from string https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647708#M756 <LI-CODE lang="markup">| makeresults | eval desc="Frankfurt (123) & Saarbrucken (456), Germany - Primary down / Secondary down" | append [| makeresults | eval desc="Frankfurt (123), Saarbrucken (456), Frankfurt Zeil (789) & Kaiserslautern (012), Germany - Primary up / Secondary up"] | append [| makeresults | eval desc="Test - Creteil - (123) - France - Primary Up // Secondary Up"] | append [| makeresults | eval desc="All devices at 456 London, England are alerting as down and unreachable"] | append [| makeresults | eval desc="Test - 123-Clonmel ( Ireland) - Primary DOWN / Secondary UP/ Switch UP"] | rex max_match=0 field=desc "(?<loc>\d{3})" | eval loc=mvjoin(loc,",")</LI-CODE> Wed, 21 Jun 2023 06:31:23 GMT https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647708#M756 ITWhisperer 2023-06-21T06:31:23Z Re: RegEx Help - how to extract the numbers from string https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647728#M757 <P>thanks <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/127939">@kamlesh_vaghela</a> and <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a> for prompt response. worked like a charm.</P> Wed, 21 Jun 2023 08:27:06 GMT https://community.splunk.com/t5/Other-Usage/RegEx-Help-how-to-extract-the-numbers-from-string/m-p/647728#M757 madhav_dholakia 2023-06-21T08:27:06Z