Archive

Format CVE using Regex

New Member

I've ran a search and one of my columns in my table references CVE IDs. However, CVE IDs in that column are not in the correct CVE ID format (i.e. CVE-XXXX-XXX). My question is, is there a way to format this column using regex to put the CVE ID's in there correct format? I have provided a screen shot below. Any help would be greatly appreciated.

alt text

0 Karma
1 Solution

SplunkTrust
SplunkTrust

@carldipace,

CVE-ID format is CVE-YEAR-Arbitrary Digits

So in your case

eval reference_cve="CVE-".reference_cve should work

View solution in original post

0 Karma

SplunkTrust
SplunkTrust

@carldipace,

CVE-ID format is CVE-YEAR-Arbitrary Digits

So in your case

eval reference_cve="CVE-".reference_cve should work

View solution in original post

0 Karma

New Member

Thank you! That worked.

0 Karma