https://community.splunk.com/t5/Splunk-Search/sed-replace-help/m-p/43479#M10223 <P>|eval http_referrer = substr(http_referrer, 1, len(http_referrer)-1)| eval link=http_referrer+uri_path |</P> Mon, 28 Sep 2020 12:19:45 GMT mcbradford 2020-09-28T12:19:45Z https://community.splunk.com/t5/Splunk-Search/sed-replace-help/m-p/43478#M10222 <P>I am using the following:</P> <P>eval link=http_referrer+uri_path | top link</P> <P>and I get</P> <P><A href="http://www.foxnews.com//static/includes/partners/dma/520.html" target="_blank">http://www.foxnews.com//static/includes/partners/dma/520.html</A></P> <P>I want to remove the double "//" and replace it with just one "/"</P> <P>I cannot get my regex to work???</P> Mon, 28 Sep 2020 12:19:41 GMT https://community.splunk.com/t5/Splunk-Search/sed-replace-help/m-p/43478#M10222 mcbradford 2020-09-28T12:19:41Z https://community.splunk.com/t5/Splunk-Search/sed-replace-help/m-p/43479#M10223 <P>|eval http_referrer = substr(http_referrer, 1, len(http_referrer)-1)| eval link=http_referrer+uri_path |</P> Mon, 28 Sep 2020 12:19:45 GMT https://community.splunk.com/t5/Splunk-Search/sed-replace-help/m-p/43479#M10223 mcbradford 2020-09-28T12:19:45Z https://community.splunk.com/t5/Splunk-Search/sed-replace-help/m-p/43480#M10224 <PRE><CODE>... | rex mode=sed field=link "s/\/\//\//" </CODE></PRE> Fri, 24 Aug 2012 14:01:53 GMT https://community.splunk.com/t5/Splunk-Search/sed-replace-help/m-p/43480#M10224 Ayn 2012-08-24T14:01:53Z