topic Splunk regex in fields in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/Splunk-regex-in-fields/m-p/544650#M5355 <P>I have the field below and I need the value not to have a comma, because I need to add up. How can I change the "," by a "." The fields are <STRONG>Valor </STRONG>and <STRONG>Frete.<BR /><BR />Ex: Valor = "164,00"</STRONG></P><P><STRONG>After: Valor = 164.00</STRONG></P><LI-CODE lang="markup">IP="189.80.213.213",Produto="Chuveiro Ducha Advanced Eletronica Turbo Lorenzetti",Valor="164,00",Categoria=Banho,Campanha="2",Vendeu="1",MetododeCompra="1",Bandeira="1",Transportadora="4",Frete="17,26",Time=2021/01/26 19:06:32.179" IP="187.72.163.215",Produto="Home Sleep Painel Para Tv 32 E 42 Acapulco E Panama Simbal",Valor="159,90",Categoria=Sala,Campanha="2",Vendeu="1",MetododeCompra="1",Bandeira="1",Transportadora="3",Frete="16,31",Time=2021/01/26 19:06:31.779"</LI-CODE><P>.</P> Sat, 20 Mar 2021 20:58:41 GMT leandrodematosp 2021-03-20T20:58:41Z Splunk regex in fields https://community.splunk.com/t5/Splunk-Enterprise/Splunk-regex-in-fields/m-p/544650#M5355 <P>I have the field below and I need the value not to have a comma, because I need to add up. How can I change the "," by a "." The fields are <STRONG>Valor </STRONG>and <STRONG>Frete.<BR /><BR />Ex: Valor = "164,00"</STRONG></P><P><STRONG>After: Valor = 164.00</STRONG></P><LI-CODE lang="markup">IP="189.80.213.213",Produto="Chuveiro Ducha Advanced Eletronica Turbo Lorenzetti",Valor="164,00",Categoria=Banho,Campanha="2",Vendeu="1",MetododeCompra="1",Bandeira="1",Transportadora="4",Frete="17,26",Time=2021/01/26 19:06:32.179" IP="187.72.163.215",Produto="Home Sleep Painel Para Tv 32 E 42 Acapulco E Panama Simbal",Valor="159,90",Categoria=Sala,Campanha="2",Vendeu="1",MetododeCompra="1",Bandeira="1",Transportadora="3",Frete="16,31",Time=2021/01/26 19:06:31.779"</LI-CODE><P>.</P> Sat, 20 Mar 2021 20:58:41 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-regex-in-fields/m-p/544650#M5355 leandrodematosp 2021-03-20T20:58:41Z Re: Splunk regex in fields https://community.splunk.com/t5/Splunk-Enterprise/Splunk-regex-in-fields/m-p/544658#M5356 <P>You can use either replace or rex like this</P><LI-CODE lang="markup">| eval Frete=replace(Frete, ",", ".") | rex field=Valor mode=sed "s/,/./"</LI-CODE><P>&nbsp;</P> Sun, 21 Mar 2021 04:48:02 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-regex-in-fields/m-p/544658#M5356 bowesmana 2021-03-21T04:48:02Z