topic Re: How would you search for an alphanumeric string where the first part is fixed and the end number varies in length? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184867#M53242 <P>do you want to search for events which have a number at the end?</P> Mon, 24 Aug 2015 18:53:30 GMT jensonthottian 2015-08-24T18:53:30Z How would you search for an alphanumeric string where the first part is fixed and the end number varies in length? https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184863#M53238 <P>I would appreciate help in a search for the following:<BR /> The first part of the string is always <CODE>/device/status/</CODE> while the end number varies in length.</P> <P>Examples (the end numbers are random and can be 6-12 digits in length):</P> <PRE><CODE> /device/status/5483367 /device/status/847532148 /device/status/687459632587 </CODE></PRE> Mon, 24 Aug 2015 16:33:28 GMT https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184863#M53238 Akita881 2015-08-24T16:33:28Z Re: How would you search for an alphanumeric string where the first part is fixed and the end number varies in length? https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184864#M53239 <P>If this string is part of a field, like source, then try this</P> <PRE><CODE>your base search ...source="/device/status/5483367*" |..rest of the search </CODE></PRE> <P>If it's a search string in raw data but not extracted yet, simply do this</P> <PRE><CODE>your base search "/device/status/5483367*" |..rest of the search </CODE></PRE> Mon, 24 Aug 2015 17:06:17 GMT https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184864#M53239 somesoni2 2015-08-24T17:06:17Z Re: How would you search for an alphanumeric string where the first part is fixed and the end number varies in length? https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184865#M53240 <P>"your base search query" "/device/status/*"</P> <P>Use wildcard "*".</P> Mon, 24 Aug 2015 17:07:42 GMT https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184865#M53240 jensonthottian 2015-08-24T17:07:42Z Re: How would you search for an alphanumeric string where the first part is fixed and the end number varies in length? https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184866#M53241 <P>I appreciate your time to reply. My apologies. I did not fully explain my question. The examples should have included what I want to exclude.<BR /> The numbers are all random and there is not a pool of them i can reference. I want to search for just the entries that are followed by numbers and not by letters.<BR /> Examples:<BR /> /device/status/5483367<BR /> /device/status/randomletters<BR /> /device/status/847532148<BR /> /device/status/687459632587<BR /> /device/status/morerandomletters</P> Mon, 24 Aug 2015 18:43:42 GMT https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184866#M53241 Akita881 2015-08-24T18:43:42Z Re: How would you search for an alphanumeric string where the first part is fixed and the end number varies in length? https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184867#M53242 <P>do you want to search for events which have a number at the end?</P> Mon, 24 Aug 2015 18:53:30 GMT https://community.splunk.com/t5/Splunk-Search/How-would-you-search-for-an-alphanumeric-string-where-the-first/m-p/184867#M53242 jensonthottian 2015-08-24T18:53:30Z