Splunk Search

show only fields values with alphanumeric value

SathyaNarayanan
Path Finder

Hi,

I have a field suser in my table, in that i have many values like Password Manager, Batcch , s4545 , Wb 5245 like tat, but i need to show only value come like s4545 or wb5245 or 4693 (alphanumeric value in a filed value)

Thanks in Advance.

Tags (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi SathyaNarayanan,
the only way is to filter events using a regex like the following

| rex field=suser ")?<suser_filtered>\w+)"

OR

| rex field=suser ")?<suser_filtered>[^ \\\|\!\"\£\$\%\&\/\(\)\=\?\^\'\*\+\,\.\;\:\-\_]+)"

Bye.
Giuseppe

0 Karma

FritzWittwer_ol
Contributor

Use a rex function to get the values out of the field you need, see Splunk Search Reference

0 Karma
Get Updates on the Splunk Community!

Full-Stack Security in Financial Services: AppDynamics, Cisco Secure Application, and ...

Full-Stack Security in Financial Services: AppDynamics, Cisco Secure Application, and Splunk ES Protecting a ...

It's Customer Success Time at .conf25

Hello Splunkers,   Ready for .conf25? The customer success and experience team is and can’t wait to see you ...

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...