The usage of the luhn command (see below) specified in the splunk app and the luhn.py script doesn't work for me. It keeps giving syntax errors no matter what options I try.
* | luhn regex="regex string" output_field=field_to_output_true/false input_field=field_to_check
Two questions:
1) What is the correct way to apply the luhn check?
2) How can I apply a regex to look for a specific card type before doing luhn check? The default command produces a lot of false positives for me and I think that's because it's looking at length of card from 13 digits to 30 instead of 13 to 19 which I believe is the true length for a card number.
... View more