Splunk Search

How to grep a number from a string?

nilotpaldutta
Explorer

Hi,

I have a column in my source with different severity levels, for example -

Severity

1 - High
2 - Medium
3 - Moderate
4 - Low
5 - Planning

From the query I need to extract only the numbers i.e. 1, 2 etc. I have tried some answers but haven't been able to get only the number.

.......| rex field=severity .severity=(?P<severity>\d+) | table severity

If anyone is aware kindly help.
Thanks in advance. Best regards.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Your regex string is good. The rex command syntax is incorrect. Try this:

...| rex field=severity "(?P<severity>\d+)" | table severity
---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

What's New in Splunk Observability - July 2025

What’s New?  We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what ...