https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129450#M35213 <P>Thanks MuS, it worked now.<BR /> actually i specified field in my query earlier, but it was not displayed in my query above:)</P> Thu, 18 Sep 2014 06:51:41 GMT karthikTIL 2014-09-18T06:51:41Z https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129446#M35209 <P>HI,</P> <P>I have source file test.csv which has words like "abc-234 " , "456", "df 654", "er567 -ly".<BR /> In all the above words, i want to take only three digit numbers and assign to a field called "eng".<BR /> Please let me know how would be the regular expression would be?</P> Thu, 18 Sep 2014 04:57:58 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129446#M35209 karthikTIL 2014-09-18T04:57:58Z https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129447#M35210 <P>Hi karthikTIL,</P> <P>use something like this:</P> <PRE><CODE>your base search here | rex "(?&lt;eng&gt;\d{3})" | ... </CODE></PRE> <P>hope this helps ...</P> <P>cheers, MuS</P> Thu, 18 Sep 2014 05:49:09 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129447#M35210 MuS 2014-09-18T05:49:09Z https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129448#M35211 <P>HI MuS,</P> <P>sorry, i forgot to add.<BR /> All my words occur after "Title #:"<BR /> e.g. Title #: df 654</P> <P>so i used,</P> <P><CODE>your base search here | rex "Title #:(?\d{3})" | ...</CODE></P> <P>but it did not give any result</P> Thu, 18 Sep 2014 05:58:48 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129448#M35211 karthikTIL 2014-09-18T05:58:48Z https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129449#M35212 <P>Sure this will not work, because this regex does not match and you did not specify a field name for the group.<BR /> Why didn't you try the regex I provided? This will catch all 3 digit numbers, no matter what comes before or after.<BR /> But if you really need to match only the <CODE>Title #:</CODE> numbers use something like this:</P> <PRE><CODE>your base search here | rex "Title\s\#\:[\s\w\-]+(?&lt;eng&gt;\d{3})" | ... </CODE></PRE> <P>and please don't use <CODE>your base search here</CODE> as your search, this is only a place holder <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Thu, 18 Sep 2014 06:17:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129449#M35212 MuS 2014-09-18T06:17:57Z https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129450#M35213 <P>Thanks MuS, it worked now.<BR /> actually i specified field in my query earlier, but it was not displayed in my query above:)</P> Thu, 18 Sep 2014 06:51:41 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129450#M35213 karthikTIL 2014-09-18T06:51:41Z https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129451#M35214 <P>you're welcome. please mark this as answered if the provided answer was correct - thx</P> Thu, 18 Sep 2014 06:53:55 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-extract-three-digit-numbers-from-a-CSV/m-p/129451#M35214 MuS 2014-09-18T06:53:55Z