https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-value-and-use-comparison-operators-in-a/m-p/110506#M28916 <P>Hi gluente Thanks for your answer its working fine now I need the above sample which is edited Please give me some trick</P> Thu, 04 Sep 2014 13:27:14 GMT akash_akkis 2014-09-04T13:27:14Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-value-and-use-comparison-operators-in-a/m-p/110504#M28914 <P>Hi I am new to splunk <BR /> I wanted to extract data from logs that have a particular string with a value and only return data where the extracted value is 100 or greater.</P> <PRE><CODE>ID: 2999 Payload: {"Audit":{"__queryElapsedTime":"267","__requestReceived":"2014.09.04 06:01:04.560 Address: sdfjkjsdljsjdjjkljsd";k;lklsdk </CODE></PRE> <P>Here is my logs I wanted to search ID , Payload , Address and list in table </P> <P>ID Address Payload<BR /> 2999 sdjsdjj;'lkdfj;ksfdk {"Audit":{"<STRONG>queryElapsedTime":"267","</STRONG>requestReceive</P> <P>Please help me I am stuck with prod issue.</P> Thu, 04 Sep 2014 06:33:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-value-and-use-comparison-operators-in-a/m-p/110504#M28914 akash_akkis 2014-09-04T06:33:57Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-value-and-use-comparison-operators-in-a/m-p/110505#M28915 <P>Hello</P> <P>Try this:</P> <PRE><CODE>your base search ... | rex "queryElapsedTime\"\:\"(?&lt;queryelapsedtime&gt;\d+)\"" | search queryelapsedtime &gt; 99 | stats count, values(queryelapsedtime) by _time </CODE></PRE> <P>Regards</P> Thu, 04 Sep 2014 07:02:11 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-value-and-use-comparison-operators-in-a/m-p/110505#M28915 gfuente 2014-09-04T07:02:11Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-value-and-use-comparison-operators-in-a/m-p/110506#M28916 <P>Hi gluente Thanks for your answer its working fine now I need the above sample which is edited Please give me some trick</P> Thu, 04 Sep 2014 13:27:14 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-value-and-use-comparison-operators-in-a/m-p/110506#M28916 akash_akkis 2014-09-04T13:27:14Z