Getting Data In

How to convert alphnumeric values to numeric values

sureshkumaar
Path Finder

How to convert the alphnumeric values to numeric values, each time the length of the values changes.

 

Can someone suggest?

 

ClusterCPUUsed=31684

ClusterCPUHALimit=383880

HARamGBLimit=589

ClusterMemUsedGB=201

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

I'm not quite sure what you would like to achieve.
Are these different fields from a single event or are they separate events? What would you like to have as output?

0 Karma

sureshkumaar
Path Finder

Hi @PickleRick - Those values are from same events, Looking to show only the numbers

The numbers whichever coming after equal to symbol has to show for the field names

ClusterCPUUsed                    --------------------> Field name

ClusterCPUUsed=31684                    --------------------> Field values

31684                                        -------------------------> Expected output

ClusterCPUHALimit                    --------------------> Field name

ClusterCPUHALimit=383880                    --------------------> Field values

383880                                                         -------------------------> Expected output

HARamGBLimit                    --------------------> Field name

HARamGBLimit=589                    --------------------> Field values

589                                                            -------------------------> Expected output

ClusterMemUsedGB                    --------------------> Field name

ClusterMemUsedGB=201                    --------------------> Field values

201                                        -------------------------> Expected output

0 Karma

sureshkumaar
Path Finder

Now i am able to get the numeric values alone when i use ltrim command, but the values after ClusterCPUUsed= keeps changing, is there any way to read all the values when we are using ltrim or any other command. Kindly help

 

| eval CPUUsed=tonumber(ltrim("ClusterCPUUsed=10145", "ClusterCPUUsed="))

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Unlocking Unified Insights: New Gigamon Federated Search App for Splunk

In today’s data-heavy environment, organizations are caught in a data distribution dilemma. As data volumes ...

GA: New Data Management App in Splunk Platform

Streamlining Data Management: Introducing a unified experience in Splunk Managing data at scale shouldn’t feel ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...