Splunk Search

Filter records from Table based on a column value as a number

nits
Explorer

Here is my Splunk Query:

index=test "Entry Done for Id=" | rex field=_raw Id=(?<Id>.*?)# | rex field=_raw UserID=(?<UserId>.*?)# | rex field=_raw Amount=(?<Amount>.*?)# | rex field=_raw PercentageAmount=(?<PercentageAmount>.*?)# 
| stats list(Id) as "Unique Id" list(UserID) as "User ID" list(Amount) as "Given Amount" list(PercentageAmount) as "Override Amount"
| table "Unique ID" "User ID" "Given Discount" "Override Amount"

I want to filter those records from this table which has 
Given Amount>50.00 OR Override Amount>90.00
Note:  Given Amount and Override Amount can be in decimal.

Labels (4)
0 Karma

manjunathmeti
Champion

Add the below query at the end of your search.

| search "Given Amount">50.00 OR "Override Amount">90.00

 

If this reply helps you, an upvote/like would be appreciated.

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...