https://community.splunk.com/t5/Splunk-Search/Remove-cc-data-from-splunk/m-p/36609#M178569 <P>We have couple of credit card data in splunk and we need to remove those from the splunk. I am using the below query to search for cc data and remove it from splunk.</P> <PRE><CODE>sourcetype="logs" (ccNumber=0* OR ccNumber=1* OR ccNumber=2* OR ccNumber=3* OR ccNumber=4* OR ccNumber=5* OR ccNumber=6* OR ccNumber=7* OR ccNumber=8* OR ccNumber=9*) | delete </CODE></PRE> <P>Even running this query i am seeing credit card data in splunk. I am just a beginner on regex and i couldnt use it. I would appreciate if you can help me in query for removing these data.</P> <P>NOTE- Few ccNumber fields are already hashed out. </P> Sun, 18 Dec 2011 04:39:23 GMT npandith 2011-12-18T04:39:23Z https://community.splunk.com/t5/Splunk-Search/Remove-cc-data-from-splunk/m-p/36609#M178569 <P>We have couple of credit card data in splunk and we need to remove those from the splunk. I am using the below query to search for cc data and remove it from splunk.</P> <PRE><CODE>sourcetype="logs" (ccNumber=0* OR ccNumber=1* OR ccNumber=2* OR ccNumber=3* OR ccNumber=4* OR ccNumber=5* OR ccNumber=6* OR ccNumber=7* OR ccNumber=8* OR ccNumber=9*) | delete </CODE></PRE> <P>Even running this query i am seeing credit card data in splunk. I am just a beginner on regex and i couldnt use it. I would appreciate if you can help me in query for removing these data.</P> <P>NOTE- Few ccNumber fields are already hashed out. </P> Sun, 18 Dec 2011 04:39:23 GMT https://community.splunk.com/t5/Splunk-Search/Remove-cc-data-from-splunk/m-p/36609#M178569 npandith 2011-12-18T04:39:23Z https://community.splunk.com/t5/Splunk-Search/Remove-cc-data-from-splunk/m-p/36610#M178570 <P>The above query has asterisk after ccNumber=[0-9]</P> Sun, 18 Dec 2011 04:43:00 GMT https://community.splunk.com/t5/Splunk-Search/Remove-cc-data-from-splunk/m-p/36610#M178570 npandith 2011-12-18T04:43:00Z