https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613225#M213108 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/228188">@zoe</a>,</P><P>if the format is always the same, you can use a regex like this:</P><LI-CODE lang="markup">index=your_index | rex "A-(?&lt;number&gt;\d+)" | stats count BY number</LI-CODE><P>you can test the regex at&nbsp;<A href="https://regex101.com/r/H1gAHF/1" target="_blank">https://regex101.com/r/H1gAHF/1</A></P><P>Ciao.</P><P>Giuseppe</P> Thu, 15 Sep 2022 13:25:23 GMT gcusello 2022-09-15T13:25:23Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613224#M213107 <P>Hi,&nbsp;</P> <P>I have data like A-001, A-002, A-003.....</P> <P>I would like to know how to extract the numbers from these strings: 001, 002, 003....so that I can generate an alert: every three batche (001, 004, 007) should be check.</P> <P>Can someone help me with that? Thanks1</P> <P>&nbsp;</P> <P>Regards,</P> <P>Tong&nbsp;</P> Thu, 15 Sep 2022 15:10:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613224#M213107 zoe 2022-09-15T15:10:23Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613225#M213108 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/228188">@zoe</a>,</P><P>if the format is always the same, you can use a regex like this:</P><LI-CODE lang="markup">index=your_index | rex "A-(?&lt;number&gt;\d+)" | stats count BY number</LI-CODE><P>you can test the regex at&nbsp;<A href="https://regex101.com/r/H1gAHF/1" target="_blank">https://regex101.com/r/H1gAHF/1</A></P><P>Ciao.</P><P>Giuseppe</P> Thu, 15 Sep 2022 13:25:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613225#M213108 gcusello 2022-09-15T13:25:23Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613288#M213139 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>&nbsp;,</P><P>&nbsp;</P><P>great! Thanks for the Tipp. It is exactly what I want. Many thanks!</P><P>&nbsp;</P><P>Regards,</P><P>Tong</P> Thu, 15 Sep 2022 17:26:22 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613288#M213139 zoe 2022-09-15T17:26:22Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613339#M213159 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/228188">@zoe</a>,</P><P>good for you, see next time!</P><P>Ciao and happy splunking</P><P>Giuseppe</P><P>P.S.: Karma Points are appreciated <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Fri, 16 Sep 2022 05:32:13 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-number-of-a-string-and-check-the-count/m-p/613339#M213159 gcusello 2022-09-16T05:32:13Z