https://community.splunk.com/t5/Getting-Data-In/Can-me-make-changes-in-csv-file-which-is-in-splunk/m-p/267829#M51363 <P>Like this (as I said in other answer):</P> <PRE><CODE>... | rex field=Host_Name mode=sed "s/\.[^.]*$//" </CODE></PRE> Thu, 24 Mar 2016 20:35:47 GMT woodcock 2016-03-24T20:35:47Z https://community.splunk.com/t5/Getting-Data-In/Can-me-make-changes-in-csv-file-which-is-in-splunk/m-p/267828#M51362 <P>Hello,</P> <P>I have a csv file and I am comparing that csv file with my search and get unique results but the problem with the csv file is that it has extensions </P> <P>example:</P> <P>my csv file has hostname with .abc.int or .auther.inc ,i just want to remove these extensions in the csv ,can we do that.that will make easy to compare with my search which has hostname</P> <P>example</P> <P>host_name(csv)</P> <P>s4000cawv.abc.int<BR /> achaesdb01.auther.inc</P> <P>host_name</P> <P>s4000cawv<BR /> achaesdb01</P> Thu, 24 Mar 2016 20:16:16 GMT https://community.splunk.com/t5/Getting-Data-In/Can-me-make-changes-in-csv-file-which-is-in-splunk/m-p/267828#M51362 vrmandadi 2016-03-24T20:16:16Z https://community.splunk.com/t5/Getting-Data-In/Can-me-make-changes-in-csv-file-which-is-in-splunk/m-p/267829#M51363 <P>Like this (as I said in other answer):</P> <PRE><CODE>... | rex field=Host_Name mode=sed "s/\.[^.]*$//" </CODE></PRE> Thu, 24 Mar 2016 20:35:47 GMT https://community.splunk.com/t5/Getting-Data-In/Can-me-make-changes-in-csv-file-which-is-in-splunk/m-p/267829#M51363 woodcock 2016-03-24T20:35:47Z