Archive

show only fields values with alphanumeric value

SathyaNarayanan
Path Finder

Hi,

I have a field suser in my table, in that i have many values like Password Manager, Batcch , s4545 , Wb 5245 like tat, but i need to show only value come like s4545 or wb5245 or 4693 (alphanumeric value in a filed value)

Thanks in Advance.

Tags (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi SathyaNarayanan,
the only way is to filter events using a regex like the following

| rex field=suser ")?<suser_filtered>\w+)"

OR

| rex field=suser ")?<suser_filtered>[^ \\\|\!\"\£\$\%\&\/\(\)\=\?\^\'\*\+\,\.\;\:\-\_]+)"

Bye.
Giuseppe

0 Karma

FritzWittwer
Contributor

Use a rex function to get the values out of the field you need, see Splunk Search Reference

0 Karma