https://community.splunk.com/t5/Splunk-Search/How-do-I-remove-specific-characters-from-a-string/m-p/351428#M162361 <P>For example, I have a string "agreementinquiry-web-2.0.3". My result should only have "agreementinquiry".</P> Tue, 13 Mar 2018 20:50:05 GMT joachimroshan 2018-03-13T20:50:05Z https://community.splunk.com/t5/Splunk-Search/How-do-I-remove-specific-characters-from-a-string/m-p/351428#M162361 <P>For example, I have a string "agreementinquiry-web-2.0.3". My result should only have "agreementinquiry".</P> Tue, 13 Mar 2018 20:50:05 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-remove-specific-characters-from-a-string/m-p/351428#M162361 joachimroshan 2018-03-13T20:50:05Z https://community.splunk.com/t5/Splunk-Search/How-do-I-remove-specific-characters-from-a-string/m-p/351429#M162362 <P>If you want to remove it at search time, then you can use sed to help</P> <PRE><CODE>| rex mode=sed "s/agreementinquiry\S+/agreementinquiry/g" </CODE></PRE> <P>It follows the format as <CODE>Replace/&lt;REGEX_TO_CAPTURE&gt;/&lt;REGEX_TO_REPLACE&gt;/global</CODE></P> <P>If you want to remove it at index time, you should use <CODE>SEDCMD</CODE></P> Tue, 13 Mar 2018 21:22:30 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-remove-specific-characters-from-a-string/m-p/351429#M162362 skoelpin 2018-03-13T21:22:30Z