Splunk Search

show only fields values with alphanumeric value

SathyaNarayanan
Path Finder

Hi,

I have a field suser in my table, in that i have many values like Password Manager, Batcch , s4545 , Wb 5245 like tat, but i need to show only value come like s4545 or wb5245 or 4693 (alphanumeric value in a filed value)

Thanks in Advance.

Tags (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi SathyaNarayanan,
the only way is to filter events using a regex like the following

| rex field=suser ")?<suser_filtered>\w+)"

OR

| rex field=suser ")?<suser_filtered>[^ \\\|\!\"\£\$\%\&\/\(\)\=\?\^\'\*\+\,\.\;\:\-\_]+)"

Bye.
Giuseppe

0 Karma

FritzWittwer_ol
Contributor

Use a rex function to get the values out of the field you need, see Splunk Search Reference

0 Karma
Get Updates on the Splunk Community!

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...

From Alert to Resolution: How Splunk Observability Helps SREs Navigate Critical ...

It's 3:17 AM, and your phone buzzes with an urgent alert. Wire transfer processing times have spiked, and ...