topic Re: How to write regex to filter out UUID before stats count in a search? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-filter-out-UUID-before-stats-count-in-a/m-p/146341#M40886 <P>Got it:<BR /> req="v*/documents/*" | rex field=req mode=sed "s/[a-fA-F0-9]{8}-([a-fA-F0-9]{4}-){3}[a-fA-F0-9]{12}//g" | stats count by req</P> Mon, 28 Sep 2020 17:45:17 GMT wang 2020-09-28T17:45:17Z How to write regex to filter out UUID before stats count in a search? https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-filter-out-UUID-before-stats-count-in-a/m-p/146339#M40884 <P>In my logs, I have a variable <STRONG>req</STRONG> that contains a REST request which includes an UUID. How do I remove the UUID so that <EM>stats count by req</EM> will ignore the UUID?</P> <P>req="v*/documents/*" | stats count by req</P> <P>v2/documents/0003cfad-c6ce-46f1-b617-9efd95d79b52<BR /> v2/documents/0003cfad-c6ce-46f1-b617-9efd95d79b52/status<BR /> v2/documents/004083f4-467e-4d25-9d71-baf7087acb2b<BR /> v2/documents/004083f4-467e-4d25-9d71-baf7087acb2b/status<BR /> v2/documents/0063891d-6822-493e-a650-31cc57989310/create<BR /> v2/documents/00ee9bb9-e21b-44c7-b437-d0c7dd1057f8<BR /> v2/documents/00ee9bb9-e21b-44c7-b437-d0c7dd1057f8/status<BR /> v2/documents/00fcce48-1768-4e89-a58b-e699be061ae4/delete</P> Mon, 28 Sep 2020 17:45:12 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-filter-out-UUID-before-stats-count-in-a/m-p/146339#M40884 wang 2020-09-28T17:45:12Z Re: How to write regex to filter out UUID before stats count in a search? https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-filter-out-UUID-before-stats-count-in-a/m-p/146340#M40885 <P>Can you provide an example output that you are currently getting and also provide an example of what your expecting based on your example above.</P> Tue, 30 Sep 2014 18:52:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-filter-out-UUID-before-stats-count-in-a/m-p/146340#M40885 icyfeverr 2014-09-30T18:52:46Z Re: How to write regex to filter out UUID before stats count in a search? https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-filter-out-UUID-before-stats-count-in-a/m-p/146341#M40886 <P>Got it:<BR /> req="v*/documents/*" | rex field=req mode=sed "s/[a-fA-F0-9]{8}-([a-fA-F0-9]{4}-){3}[a-fA-F0-9]{12}//g" | stats count by req</P> Mon, 28 Sep 2020 17:45:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-regex-to-filter-out-UUID-before-stats-count-in-a/m-p/146341#M40886 wang 2020-09-28T17:45:17Z