Splunk Search

Removing leading and trailing symbols from a string for numeric conversion

bonddodla
New Member

I have a field Threshold which has a value "+-5%", ">20%", "<30%" etc, which i want to convert into a number.

Could you please suggest how can i remove the leading and trailing symbols so that i can achieve the numeric value only.

Tags (1)
0 Karma
1 Solution

niketn
Legend

@bonddodla try the following rex command on your Threshold field

| rex field="Threshold" "(?<Threshold>\d+)"

Following is a run anywhere example based on sample data provided in the question

| makeresults
| eval Threshold="+-5%,>20%,<30%"
| makemv Threshold delim=","
| mvexpand Threshold
| rex field="Threshold" "(?<Threshold>\d+)"
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

bonddodla
New Member

Thanks. It worked

0 Karma

niketn
Legend

@bonddodla try the following rex command on your Threshold field

| rex field="Threshold" "(?<Threshold>\d+)"

Following is a run anywhere example based on sample data provided in the question

| makeresults
| eval Threshold="+-5%,>20%,<30%"
| makemv Threshold delim=","
| mvexpand Threshold
| rex field="Threshold" "(?<Threshold>\d+)"
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...