Splunk Search

Regex to match the price amount in Splunk?

pavanae
Builder

The following are my search results

<Total_Amount_Due>122.34</Total_Amount_Due>
<Total_Amount_Due>2.3</Total_Amount_Due>
<Total_Amount_Due>765.33</Total_Amount_Due>

Now Please suggest me a Regex which displays all the amounts.

Thanks in Advance

0 Karma
1 Solution

somesoni2
SplunkTrust
SplunkTrust

Try this (may need to adjust the

your current search giving above result | rex field=_raw "\<Total_Amount_Due\>(?<Amount[^\<]+)\<\/Total_Amount_Due\>" 

View solution in original post

ppablo
Retired

Hi @pavanae

I'm glad you've been very active here on Answers and have been getting a lot of help from the community, but I also have noticed that you've been posting a lot of question asking for users to just give you regular expressions for your sample data. Have you been trying to write your regular expressions on your own as well? I'd highly recommend you check out this previous Answers post on the various free regex resources you can look into http://answers.splunk.com/answers/153171/is-there-any-online-regex-tool-to-create-regular-e.html Just a reminder that this is a Q&A forum for Splunk specific topics and not just a place to get regular expressions written for you.

0 Karma

pavanae
Builder

ok Thanks 🙂

0 Karma

somesoni2
SplunkTrust
SplunkTrust

Try this (may need to adjust the

your current search giving above result | rex field=_raw "\<Total_Amount_Due\>(?<Amount[^\<]+)\<\/Total_Amount_Due\>" 
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...