How do you search for a specific string?

andreiraduta · ‎10-31-2018

Hello,

Is there any way to search for a number which contains exactly 13 characters and starts with either 1 or 2 ?

Another question: say i have a list of names. Can i search a document to see if there are any names from the previous link present in document?

Thank you

richgalloway · ‎10-31-2018

The first question can be solved with regex. For example, the search looks for a 1 or 2 followed by 12 digits.

index=foo | regex "[12]\d{12}" | ...

The second question is unclear. Could you add some detail?

---
If this reply helps you, Karma would be appreciated.

Are you a member of the Splunk Community?