topic Re: Display phone number value without commas? in Splunk Search

Display phone number value without commas?

simpkins1958 — Tue, 08 Mar 2016 22:38:25 GMT

Trying to display a phone number as a single value but it is getting formatted with commas:

xx,xxx,xxx,xxx

What just the numbers:

xxxxxxxxxxx

Re: Display phone number value without commas?

somesoni2 — Tue, 08 Mar 2016 22:59:03 GMT

Can you post some sample events? Does your raw data already have commas in phone number values?

Re: Display phone number value without commas?

simpkins1958 — Wed, 09 Mar 2016 02:51:02 GMT

We have a phone number value of 12065555555

and it is displaying as 12,0625,555,555

Want it displayed without the commas.

Re: Display phone number value without commas?

simpkins1958 — Wed, 09 Mar 2016 02:52:49 GMT

3/8/16
6:13:23.000 PM

{ [-]
adapterId: 351873050549463

uid: CCD77670006B3660B91BCB1C5EDB45C0

value: 12065555555

}

Show as raw text
host = jims-splunk-02

source = NetMotion

sourcetype = PhoneNumber

Re: Display phone number value without commas?

fdi01 — Wed, 09 Mar 2016 09:23:02 GMT

host = jims-splunk-02  source = NetMotion sourcetype = PhoneNumber |spath | rename value  as PhoneNumber|...

Re: Display phone number value without commas?

gyslainlatsa — Wed, 09 Mar 2016 09:23:26 GMT

hi simpkins 1958,

use the function rmcomma() like this |convert rmcomma(PhoneNumber)

rmcomma()
Syntax: rmcomma(<wc-field>)
Description: Removes all commas from value, for example
rmcomma(1,000,000.00) returns 1000000.00. You can use wild card
characters in the field name.

Re: Display phone number value without commas?

ngatchasandra — Wed, 09 Mar 2016 09:47:11 GMT

Hi simpkins1958,

Try with this query, it work fine!!!!

your base search...| rex newPhoneNumber=phoneNumber mode=sed "s/,/ /g"

Eg: with this, 2,147,483,648 become 2 147 483 648