Splunk Search

SEDCMD to remove text

kashnburn
Engager

I'm trying to use SEDCMD to remove some text from a logfile. example data below, data to be removed in bold. Tried some different ways to do this but can't seem to get it to work correctly. 

5722SS1 V5R4M0 060210                                Messages in queue - WMSMSGQ                                      Page  0001

MSGID    SEV MSG TYPE

SAP0157  30  INFO         markout key WMSPIX8706200011450515323 2332615 870 810344313-24 has invalid data for field articleId value

                            810344313-24-6.  Message id 414D5120514D5F4754575F513120202069C7445920DADA0F.

                      MARKOUT870 QPGMR      040033 MS733C1      0000 06/28/17 11:01:29.968280 QPGMR

SAP0157  30  INFO         markout key WMSPIX8706200011450515334 2332563 870 810344313-24 has invalid data for field articleId value

                            810344313-24-6.  Message id 414D5120514D5F4754575F513120202069C7445920DADA15.

                      MARKOUT870 QPGMR      040034 MS733C1      0000 06/28/17 11:01:29.992920 QPGMR

SAP0157  30  INFO         markout key WMSPIX8706200011450515378 2332614 870 810344313-24 has invalid data for field articleId value

                            810344313-24-6.  Message id 414D5120514D5F4754575F513120202069C7445920DADA2D.

                      MARKOUT870 QPGMR      040038 MS733C1      0000 06/28/17 11:02:13.477976 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200012405935623 2332314 874 810333491-36 has invalid data for field articleId value

                            810333491-36-9.  Message id 414D5120514D5F4754575F51312020202C3C575920528D0F.

                      MARKOUT874 QPGMR      113530 MS733C1      0000 07/05/17 14:32:35.621352 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200012405935612 2332314 874 810314813-36 has invalid data for field articleId value

                            810314813-36-3.  Message id 414D5120514D5F4754575F51312020202C3C575920528D09.

                      MARKOUT874 QPGMR      113529 MS733C1      0000 07/05/17 14:32:35.673248 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405793881 2332314 874 810314813-36 has invalid data for field articleId value

                            810314813-36-3.  Message id 414D5120514D5F4754575F51312020202C3C575920528D21.

                      MARKOUT874 QPGMR      113532 MS733C1      0000 07/05/17 14:32:50.738224 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405825461 2332260 874 810343142-24 has invalid data for field articleId value

                            810343142-24-6.  Message id 414D5120514D5F4754575F51312020202C3C575920528D27.

                      MARKOUT874 QPGMR      113533 MS733C1      0000 07/05/17 14:32:50.744880 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405825471 2332260 874 810314813-36 has invalid data for field articleId value

                            810314813-36-3.  Message id 414D5120514D5F4754575F51312020202C3C575920528D2D.

                      MARKOUT874 QPGMR      113534 MS733C1      0000 07/05/17 14:32:51.045448 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405825491 2332260 874 810325875-1- has invalid data for field articleId value

                            810325875-1-1.  Message id 414D5120514D5F4754575F51312020202C3C575920528D39.

                      MARKOUT874 QPGMR      113536 MS733C1      0000 07/05/17 14:32:51.467576 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405825501 2332260 874 810310457-4- has invalid data for field articleId value

                            810310457-4-4.  Message id 414D5120514D5F4754575F51312020202C3C575920528D3F.

                      MARKOUT874 QPGMR      113537 MS733C1      0000 07/05/17 14:32:51.831232 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405825521 2332290 874 810314813-36 has invalid data for field articleId value

                            810314813-36-3.  Message id 414D5120514D5F4754575F51312020202C3C575920528D4B.

                      MARKOUT874 QPGMR      113539 MS733C1      0000 07/05/17 14:33:11.110064 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405869751 2332288 874 810344302-12 has invalid data for field articleId value

                            810344302-12-6.  Message id 414D5120514D5F4754575F51312020202C3C575920528D63.

                      MARKOUT874 QPGMR      113543 MS733C1      0000 07/05/17 14:33:25.359368 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405869761 2332288 874 810314813-36 has invalid data for field articleId value

                            810314813-36-3.  Message id 414D5120514D5F4754575F51312020202C3C575920528D69.

                      MARKOUT874 QPGMR      113545 MS733C1      0000 07/05/17 14:33:25.714544 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405869771 2332288 874 810347257-32 has invalid data for field articleId value

                            810347257-32-1.  Message id 414D5120514D5F4754575F51312020202C3C575920528D6F.

                      MARKOUT874 QPGMR      113546 MS733C1      0000 07/05/17 14:33:26.018248 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200042405869801 2332288 874 810325875-1- has invalid data for field articleId value

                            810325875-1-1.  Message id 414D5120514D5F4754575F51312020202C3C575920528D81.

                      MARKOUT874 QPGMR      113549 MS733C1      0000 07/05/17 14:33:55.842720 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200012405976081 2332257 874 810333491-36 has invalid data for field articleId value

                            810333491-36-9.  Message id 414D5120514D5F4754575F51312020202C3C57592052D203.

                      MARKOUT874 QPGMR      113715 MS733C1      0000 07/05/17 15:01:25.353112 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200012405976103 2332300 874 810333491-36 has invalid data for field articleId value

                            810333491-36-9.  Message id 414D5120514D5F4754575F51312020202C3C57592052D20F.

                      MARKOUT874 QPGMR      113717 MS733C1      0000 07/05/17 15:01:25.358520 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200012406002972 2332306 874 810333491-36 has invalid data for field articleId value

                            810333491-36-9.  Message id 414D5120514D5F4754575F51312020202C3C57592052E909.

                      MARKOUT874 QPGMR      113763 MS733C1      0000 07/05/17 15:10:56.760664 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200012406029972 2332328 874 810333491-36 has invalid data for field articleId value

                            810333491-36-9.  Message id 414D5120514D5F4754575F51312020202C3C575920531909.

5722SS1 V5R4M0 060210                                Messages in queue - WMSMSGQ                                      Page  0002

MSGID    SEV MSG TYPE

                      MARKOUT874 QPGMR      113863 MS733C1      0000 07/05/17 15:30:14.893848 QPGMR

SAP0157  30  INFO         markout key WMSPIX8746200012406030005 2332365 874 810314813-36 has invalid data for field articleId value

                            810314813-36-3.  Message id 414D5120514D5F4754575F51312020202C3C57592053191B

 

Labels (2)
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @kashnburn 

Bolded text is a separate event or mixed with any other events? 

What is the dynamic portion of bolded text?

0 Karma
Get Updates on the Splunk Community!

Explore the Latest Educational Offerings from Splunk [January 2025 Updates]

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...

State of Splunk Careers 2024: Maximizing Career Outcomes and the Continued Value of ...

For the past four years, Splunk has partnered with Enterprise Strategy Group to conduct a survey that gauges ...