Splunk Search

What is the best way to get regex sed to remove any words with numbers?

subtrakt
Contributor

Trying to get ideas on the best efficient/simple rex mode=sed to replace any words with a number(s).

Examples of what should be replaced:

0909asdf009
asdf9090-333234aaf
asdf009sdd
3039aaa:
aa33--33aa-3039:

This is nice and compact but doesn't seem to work the way I thought it would as i'm still getting fragments of the word in my results.

s/[\w\W?]+[0-9]/ /g

UPDATE:
Think this is closer but curious to see what others say:
([A-Za-z0-9-.,:_]+)[0-9]+

Tags (2)
0 Karma
1 Solution

elliotproebstel
Champion

How about this regex: (\S*[0-9]+)+\S* ? If it doesn't work, you can post some counterexamples, and I'll refine. It works with all examples above.

View solution in original post

elliotproebstel
Champion

How about this regex: (\S*[0-9]+)+\S* ? If it doesn't work, you can post some counterexamples, and I'll refine. It works with all examples above.

subtrakt
Contributor

Thanks Elliot. That works. Looks like this also works \S*\d+\S*.

0 Karma

elliotproebstel
Champion

Ah, true! Good simplification 🙂

Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...