Splunk Search
Highlighted

Regex to match the price amount in Splunk?

Builder

The following are my search results

<TotalAmountDue>122.34</TotalAmountDue>
<TotalAmountDue>2.3</TotalAmountDue>
<TotalAmountDue>765.33</TotalAmountDue>

Now Please suggest me a Regex which displays all the amounts.

Thanks in Advance

0 Karma
Highlighted

Re: Regex to match the price amount in Splunk?

SplunkTrust
SplunkTrust

Try this (may need to adjust the

your current search giving above result | rex field=_raw "\<Total_Amount_Due\>(?<Amount[^\<]+)\<\/Total_Amount_Due\>" 

View solution in original post

Highlighted

Re: Regex to match the price amount in Splunk?

Community Manager
Community Manager

Hi @pavanae

I'm glad you've been very active here on Answers and have been getting a lot of help from the community, but I also have noticed that you've been posting a lot of question asking for users to just give you regular expressions for your sample data. Have you been trying to write your regular expressions on your own as well? I'd highly recommend you check out this previous Answers post on the various free regex resources you can look into http://answers.splunk.com/answers/153171/is-there-any-online-regex-tool-to-create-regular-e.html Just a reminder that this is a Q&A forum for Splunk specific topics and not just a place to get regular expressions written for you.

0 Karma
Highlighted

Re: Regex to match the price amount in Splunk?

Builder

ok Thanks 🙂

0 Karma