Splunk Search

Check for pure numeric field values or alphanumeric

AshimaE
Explorer

I have extracted a field using regex having the name push. I now have to classify all my rows into two categories based on whether push is all numeric or contains some alphabets also. Let it be divided into classes pure and mixed and given in a field class.
Any suggestions on how to do this since the numbers involved are too huge going upto 15-20 characters.How to fill in the class field for this statement.

Tags (2)
0 Karma

niketn
Legend

Hi Ashima, you can use isnum() evaluation function. Following is run-anywhere search.

| makeresults
| eval push="TestData123"
| eval class=if(isnum(push),"numeric","alpha")

PS: Above one will treat negative and decimal numbers also as numeric.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

niketn
Legend

@AshimaE, can you please test and confirm whether the suggested change works for you?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi AshimaE,
try something like this

your_search
| rex field=push "(?<type_num>[0-9]*)"
| eval type=if(type_num=*,"Numeric","Alfanumeric")
| stats count by type

Bye.
Giuseppe

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...