topic Re: Extract numerical value from text logs and get max occurrence of the number in Splunk Search https://community.splunk.com/t5/Splunk-Search/Extract-numerical-value-from-text-logs-and-get-max-occurrence-of/m-p/529594#M149590 <P>Thank you. This helps a lot and gives me a great starting point to explore further.</P> Mon, 16 Nov 2020 18:09:40 GMT vinayakolhapure 2020-11-16T18:09:40Z Extract numerical value from text logs and get max occurrence of the number https://community.splunk.com/t5/Splunk-Search/Extract-numerical-value-from-text-logs-and-get-max-occurrence-of/m-p/529583#M149583 <P>I want to extract a number from logs where the line of interest looks like,</P><P><EM><SPAN class="t">INFO</SPAN> <SPAN class="t">2020-11-16</SPAN> <SPAN class="t">12:11:47</SPAN>,<SPAN class="t">161</SPAN> [ThreadName-1] <SPAN class="t">com.mypackage.myclass</SPAN> <SPAN class="t">TransId:</SPAN> <SPAN class="t">a12345b6-7cde-8901-2f34-g5hi6jk789l0</SPAN> <SPAN class="t">Req</SPAN>&nbsp;<SPAN class="t">ID</SPAN> <SPAN class="t">-</SPAN> <SPAN class="t">123456</SPAN> <SPAN class="t">EvNum-1234567</SPAN> <SPAN class="t">-</SPAN> <SPAN class="t a"><SPAN class="t">Received</SPAN></SPAN>&nbsp;12&nbsp;create<SPAN class="t a"><SPAN class="t">/cancel</SPAN></SPAN> <SPAN class="t a"><SPAN class="t">request.</SPAN></SPAN></EM></P><P>I want to extract all occurrences for the number (in this example 12) between "Received " and " create/cancel request." for a time range and get the max. Basically to get what is the largest request the app received.</P><P>Thank you for your help with this.</P> Mon, 16 Nov 2020 17:23:33 GMT https://community.splunk.com/t5/Splunk-Search/Extract-numerical-value-from-text-logs-and-get-max-occurrence-of/m-p/529583#M149583 vinayakolhapure 2020-11-16T17:23:33Z Re: Extract numerical value from text logs and get max occurrence of the number https://community.splunk.com/t5/Splunk-Search/Extract-numerical-value-from-text-logs-and-get-max-occurrence-of/m-p/529587#M149585 <P>I like to use rex for this purpose.</P><LI-CODE lang="markup">... | rex "Received (?&lt;requestCount&gt;\d+)" | stats max(requestCount) as largestRequest</LI-CODE> Mon, 16 Nov 2020 17:59:14 GMT https://community.splunk.com/t5/Splunk-Search/Extract-numerical-value-from-text-logs-and-get-max-occurrence-of/m-p/529587#M149585 richgalloway 2020-11-16T17:59:14Z Re: Extract numerical value from text logs and get max occurrence of the number https://community.splunk.com/t5/Splunk-Search/Extract-numerical-value-from-text-logs-and-get-max-occurrence-of/m-p/529594#M149590 <P>Thank you. This helps a lot and gives me a great starting point to explore further.</P> Mon, 16 Nov 2020 18:09:40 GMT https://community.splunk.com/t5/Splunk-Search/Extract-numerical-value-from-text-logs-and-get-max-occurrence-of/m-p/529594#M149590 vinayakolhapure 2020-11-16T18:09:40Z