I have extracted a field using regex having the name push. I now have to classify all my rows into two categories based on whether push is all numeric or contains some alphabets also. Let it be divided into classes pure and mixed and given in a field class.
Any suggestions on how to do this since the numbers involved are too huge going upto 15-20 characters.How to fill in the class field for this statement.
Hi Ashima, you can use isnum() evaluation function. Following is run-anywhere search.
| makeresults
| eval push="TestData123"
| eval class=if(isnum(push),"numeric","alpha")
PS: Above one will treat negative and decimal numbers also as numeric.
@AshimaE, can you please test and confirm whether the suggested change works for you?
Hi AshimaE,
try something like this
your_search
| rex field=push "(?<type_num>[0-9]*)"
| eval type=if(type_num=*,"Numeric","Alfanumeric")
| stats count by type
Bye.
Giuseppe