Splunk Search

How to extract a field value which have combination of number and special characters?

akarivaratharaj
Communicator

I have a field which have values only with numbers and also with combination of number and special characters as values. I would like to filter the field values where both number and special characters are in it.

Example:
Log 1 -> field1="238_345$345"

Log 2 -> field1="+739-8883

Log 3 -> field1="542.789#298"

Already I have tried in writing regex query but there is no expression to filter out the combination of digits & special characters. (No expression to filter all the special character).

How can I filter and display the field value which have the combination of number and special characters? Could anyone help me on this?

Labels (2)
0 Karma

SinghK
Builder
[+\-0-9#$%^!._?@]

 character class 

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Are you sure you want _any_ special character? How do you even define a special character in this case?

I'd rather go either for any non-space character and use

\S

or explicitly define set of acceptable character using character class. Like

[-0-9#$%^!.?@]
0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...