topic Re: How to write the regex with mode=sed in a search to mask part of credit card numbers? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262481#M78794 <P>Please write your search (for masking like ############2222) - we could modify it</P> Tue, 24 May 2016 09:44:27 GMT lukasz92 2016-05-24T09:44:27Z How to write the regex with mode=sed in a search to mask part of credit card numbers? https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262480#M78793 <P>I need help with one particular search for masking credit card numbers, but with this output 22222#######2222. I know how to manage search for ############2222, but don't know how to mask between numbers.</P> <P>Thanks, cheers</P> Tue, 24 May 2016 09:20:55 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262480#M78793 gagi76 2016-05-24T09:20:55Z Re: How to write the regex with mode=sed in a search to mask part of credit card numbers? https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262481#M78794 <P>Please write your search (for masking like ############2222) - we could modify it</P> Tue, 24 May 2016 09:44:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262481#M78794 lukasz92 2016-05-24T09:44:27Z Re: How to write the regex with mode=sed in a search to mask part of credit card numbers? https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262482#M78795 <PRE><CODE>mod=sed "s/(\\d{12})/############/g" </CODE></PRE> Tue, 24 May 2016 09:48:22 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262482#M78795 gagi76 2016-05-24T09:48:22Z Re: How to write the regex with mode=sed in a search to mask part of credit card numbers? https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262483#M78796 <P>Something like <CODE>mod=sed "s/(\\d{5})(\\d{7})(\\d{4})/\\1############\\3/g"</CODE></P> <P>Will rewrite first match, write hashes and third match</P> <P>edited; I forgot about escaping \</P> Tue, 24 May 2016 10:01:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262483#M78796 lukasz92 2016-05-24T10:01:28Z Re: How to write the regex with mode=sed in a search to mask part of credit card numbers? https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262484#M78797 <P>It's great, thanks!</P> Tue, 24 May 2016 10:11:16 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-the-regex-with-mode-sed-in-a-search-to-mask-part-of/m-p/262484#M78797 gagi76 2016-05-24T10:11:16Z