Splunk Search

Filter records from Table based on a column value as a number

nits
Explorer

Here is my Splunk Query:

index=test "Entry Done for Id=" | rex field=_raw Id=(?<Id>.*?)# | rex field=_raw UserID=(?<UserId>.*?)# | rex field=_raw Amount=(?<Amount>.*?)# | rex field=_raw PercentageAmount=(?<PercentageAmount>.*?)# 
| stats list(Id) as "Unique Id" list(UserID) as "User ID" list(Amount) as "Given Amount" list(PercentageAmount) as "Override Amount"
| table "Unique ID" "User ID" "Given Discount" "Override Amount"

I want to filter those records from this table which has 
Given Amount>50.00 OR Override Amount>90.00
Note:  Given Amount and Override Amount can be in decimal.

Labels (4)
0 Karma

manjunathmeti
Champion

Add the below query at the end of your search.

| search "Given Amount">50.00 OR "Override Amount">90.00

 

If this reply helps you, an upvote/like would be appreciated.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...