Splunk Search

How can I convert a text string to a number?

ptur
Path Finder

I have a field that contains a text string representing time ("900 ms" for example - all values are in milliseconds) is there a way to extract a number, so i can find values "greater than" or "smaller than"?

0 Karma
1 Solution

493669
Super Champion

try this

...|rex field=<fieldname> "(?<ms>\d+)"

include your fieldname here

View solution in original post

0 Karma

TISKAR
Builder

Hello,

Can you try this please:

|makeresults | eval field="900 ms" | rex field=field "(?<field>\d+)"

Regards

0 Karma

493669
Super Champion

try this

...|rex field=<fieldname> "(?<ms>\d+)"

include your fieldname here

0 Karma

ptur
Path Finder

thanks !!!

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...