topic Re: How to replace dynamic field values? in Dashboards & Visualizations

How to replace dynamic field values?

kallisrayar1986 — Thu, 29 Jan 2015 19:12:02 GMT

I have a field (Details) with the below values which is an output of stats command:

Details:

values(XXX)
values(YYY)

i want to replace the above with XXX and YYY, basically i want to trim values( and ).

If i try "replace values(XXX) with XXX in Details" it works fine but the XXX and YYY will be keep changing based on my search and it is going to be dynamic.

Please help.

Re: How to replace dynamic field values?

ramdaspr — Tue, 03 Feb 2015 02:25:09 GMT

If I understood the question correctly, you can use eval trim to remove the static characters.
so that would be

your query here | eval Details=trim(Details,"values(") | eval Details=trim(Details,")")

Re: How to replace dynamic field values?

kallisrayar1986 — Tue, 03 Feb 2015 18:51:36 GMT

Thank you, but the above query trims every field even if it does not contain values(), any other suggestion?

Re: How to replace dynamic field values?

ramdaspr — Tue, 03 Feb 2015 23:27:33 GMT

Can you provide a sizable sample of what your data column looks like?
The trim command should ideally work only if a match is present so I am not sure what dataset its processing which is causing this issue.

Re: How to replace dynamic field values?

kallisrayar1986 — Mon, 28 Sep 2020 18:50:23 GMT

It is a tranpose results set, the column name is Details: the values are as follows -

Details

test_id
iter
appver
Scenario
Version
requests_count_total
values(aaa)
values(bbb)
values(ccc)
values(ddd)
values(eee)
values(fff)

Re: How to replace dynamic field values?

ramdaspr — Wed, 04 Feb 2015 01:50:00 GMT

... | rex field=Details mode=sed "s/^values\(//" | rex field=Details mode=sed "s/\)$//"

Lets see if rex does it this time. I tried it locally with single strings and it seems to work ok.

Re: How to replace dynamic field values?

kallisrayar1986 — Wed, 04 Feb 2015 19:59:48 GMT

hi, it worked fine this time.. thank you..!! 🙂

Re: How to replace dynamic field values?

ramdaspr — Thu, 05 Feb 2015 01:32:21 GMT

No worries. But you have to note that it isnt the perfect solution either since it will replace any field value which has a ")" at the end even if it doesnt start with "values(".

Unfortunately my regex skills are lacking so you might want to check if there is a better regex option.