Getting Data In

How to convert alphnumeric values to numeric values

sureshkumaar
Path Finder

How to convert the alphnumeric values to numeric values, each time the length of the values changes.

 

Can someone suggest?

 

ClusterCPUUsed=31684

ClusterCPUHALimit=383880

HARamGBLimit=589

ClusterMemUsedGB=201

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

I'm not quite sure what you would like to achieve.
Are these different fields from a single event or are they separate events? What would you like to have as output?

0 Karma

sureshkumaar
Path Finder

Hi @PickleRick - Those values are from same events, Looking to show only the numbers

The numbers whichever coming after equal to symbol has to show for the field names

ClusterCPUUsed                    --------------------> Field name

ClusterCPUUsed=31684                    --------------------> Field values

31684                                        -------------------------> Expected output

ClusterCPUHALimit                    --------------------> Field name

ClusterCPUHALimit=383880                    --------------------> Field values

383880                                                         -------------------------> Expected output

HARamGBLimit                    --------------------> Field name

HARamGBLimit=589                    --------------------> Field values

589                                                            -------------------------> Expected output

ClusterMemUsedGB                    --------------------> Field name

ClusterMemUsedGB=201                    --------------------> Field values

201                                        -------------------------> Expected output

0 Karma

sureshkumaar
Path Finder

Now i am able to get the numeric values alone when i use ltrim command, but the values after ClusterCPUUsed= keeps changing, is there any way to read all the values when we are using ltrim or any other command. Kindly help

 

| eval CPUUsed=tonumber(ltrim("ClusterCPUUsed=10145", "ClusterCPUUsed="))

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...