Hi,
I have a field suser in my table, in that i have many values like Password Manager, Batcch , s4545 , Wb 5245 like tat, but i need to show only value come like s4545 or wb5245 or 4693 (alphanumeric value in a filed value)
Thanks in Advance.
Hi SathyaNarayanan,
the only way is to filter events using a regex like the following
| rex field=suser ")?<suser_filtered>\w+)"
OR
| rex field=suser ")?<suser_filtered>[^ \\\|\!\"\£\$\%\&\/\(\)\=\?\^\'\*\+\,\.\;\:\-\_]+)"
Bye.
Giuseppe
Use a rex function to get the values out of the field you need, see Splunk Search Reference