topic Re: How to append zeros to the beginning of existing numeric values for a field to make each value 6 digits long? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287610#M87069 <P>Yup, updated the answer with the field name for input and output.</P> Tue, 12 Apr 2016 16:47:48 GMT martin_mueller 2016-04-12T16:47:48Z How to append zeros to the beginning of existing numeric values for a field to make each value 6 digits long? https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287606#M87065 <P>Hi</P> <P>I was wondering if anyone may be able to help. We have an existing field with numbers from 2 up to 6 digits.</P> <P>09<BR /> 03<BR /> 465<BR /> 498<BR /> 3895<BR /> 6409<BR /> 85939<BR /> 37624<BR /> 847809<BR /> 783906</P> <P>I would like to be able to append zero's to the list so they will all have 6 digits as below</P> <P>000009<BR /> 000003<BR /> 000465<BR /> 000498<BR /> 003895<BR /> 006409<BR /> 085939<BR /> 037624<BR /> 847809<BR /> 783906</P> Mon, 11 Apr 2016 21:11:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287606#M87065 ajdyer2000 2016-04-11T21:11:40Z Re: How to append zeros to the beginning of existing numeric values for a field to make each value 6 digits long? https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287607#M87066 <P>You can use this:</P> <PRE><CODE>... | eval SerialNumber = substr("00000", 0, max(6-len(SerialNumber), 0)) . SerialNumber </CODE></PRE> Mon, 11 Apr 2016 22:14:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287607#M87066 martin_mueller 2016-04-11T22:14:32Z Re: How to append zeros to the beginning of existing numeric values for a field to make each value 6 digits long? https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287608#M87067 <P>thanks Martin. the field name is "SerialNumber" how would I incorporate that into the eval command? </P> Tue, 12 Apr 2016 12:57:13 GMT https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287608#M87067 ajdyer2000 2016-04-12T12:57:13Z Re: How to append zeros to the beginning of existing numeric values for a field to make each value 6 digits long? https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287609#M87068 <P>Replace 'input' with 'SerialNumber'. </P> Tue, 12 Apr 2016 13:58:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287609#M87068 somesoni2 2016-04-12T13:58:57Z Re: How to append zeros to the beginning of existing numeric values for a field to make each value 6 digits long? https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287610#M87069 <P>Yup, updated the answer with the field name for input and output.</P> Tue, 12 Apr 2016 16:47:48 GMT https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287610#M87069 martin_mueller 2016-04-12T16:47:48Z Re: How to append zeros to the beginning of existing numeric values for a field to make each value 6 digits long? https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287611#M87070 <P>Thank you martin that worked</P> Wed, 13 Apr 2016 17:55:19 GMT https://community.splunk.com/t5/Splunk-Search/How-to-append-zeros-to-the-beginning-of-existing-numeric-values/m-p/287611#M87070 ajdyer2000 2016-04-13T17:55:19Z