Splunk Search

How to write the regex with mode=sed in a search to mask part of credit card numbers?

gagi76
New Member

I need help with one particular search for masking credit card numbers, but with this output 22222#######2222. I know how to manage search for ############2222, but don't know how to mask between numbers.

Thanks, cheers

0 Karma
1 Solution

lukasz92
Communicator

Please write your search (for masking like ############2222) - we could modify it

View solution in original post

0 Karma

lukasz92
Communicator

Please write your search (for masking like ############2222) - we could modify it

0 Karma

gagi76
New Member
mod=sed "s/(\\d{12})/############/g"
0 Karma

lukasz92
Communicator

Something like mod=sed "s/(\\d{5})(\\d{7})(\\d{4})/\\1############\\3/g"

Will rewrite first match, write hashes and third match

edited; I forgot about escaping \

gagi76
New Member

It's great, thanks!

0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...