Splunk Search

How to Extract multiple 10-digit numbers from field2

Gzee
Engager

Hi, Novice splunker here. My search only extracts 1st 10-digit number and my data contains atleast 4 or more  10-digit numbers. Need help on how to make a list of numbers from following example text.

 example data in field2:

1111111111,Standard,R9801,
2222222222,Standard,S9801,
3333333333,Standard,T9801,
4444444444,Standard,U9801,
5555555555,Standard,V9801,

For order and enquiries contact 111xxxxxx and mention the 15 digit ID "ACOOLXXXXXX"

 



|rex field=Data "(?<Numbers>\d{10,})"
|table Numbers
Output of above is only 1st number in the field Numbers>> 1111111111
Thanks.

 

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
|rex field=Data max_match=0 "(?<Numbers>\d{10,})"

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust
|rex field=Data max_match=0 "(?<Numbers>\d{10,})"
Get Updates on the Splunk Community!

Splunk App for Anomaly Detection End of Life Announcment

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...