Extract numeric values with in a field

iamsplunker — Tue, 07 Jul 2020 02:25:03 GMT

We have a field called number and the field number has both alpha and numeric values like "number=AVAILABLE=25 USD;" and the field number also has multi values like number=" CREDIT_PAYMENT=200.22 USD; DEBIT_PAYMENT=500.10 USD;" also it has null values like number=null

I want to extract all dollar amounts like 25 and 200.22 and 500.10 and create a new field. How can I achieve this?

Please help

Re: Extract numeric values with in a field

renjith_nair — Tue, 07 Jul 2020 03:12:26 GMT

@iamsplunker,

Try and test against your data

|rex field=number max_match=0 "=(?<digits>\d+.?\d+|null)"

topic Re: Extract numeric values with in a field in Splunk Search

Extract numeric values with in a field

Re: Extract numeric values with in a field