https://community.splunk.com/t5/Splunk-Search/Convert-Craig-40gmail-com-to-craig-gmail-com/m-p/433208#M168357 <P>+1 for urldecode function use.</P> Thu, 12 Jul 2018 15:24:03 GMT somesoni2 2018-07-12T15:24:03Z https://community.splunk.com/t5/Splunk-Search/Convert-Craig-40gmail-com-to-craig-gmail-com/m-p/433206#M168355 <P>Hi,</P> <P>Probably a simple answer, but how do I convert %40 to @. For example craig%40gmail.com to <A href="mailto:craig@gmail.com">craig@gmail.com</A></P> <P>Thanks in advance,<BR /> Craig</P> Thu, 12 Jul 2018 08:36:52 GMT https://community.splunk.com/t5/Splunk-Search/Convert-Craig-40gmail-com-to-craig-gmail-com/m-p/433206#M168355 craigpbrown 2018-07-12T08:36:52Z https://community.splunk.com/t5/Splunk-Search/Convert-Craig-40gmail-com-to-craig-gmail-com/m-p/433207#M168356 <P>For the specific case, try the <CODE>replace</CODE> command</P> <PRE><CODE>... | replace "%40" with "@" in foo | ... </CODE></PRE> <P>or the <CODE>replace</CODE> function</P> <PRE><CODE>... | eval foo = replace(foo, "%40", "@") | ... </CODE></PRE> <P>For the more general case of any URL-encoded character, try the <CODE>urldecode</CODE> function</P> <PRE><CODE>... | foo = urldecode(bar) | ... </CODE></PRE> Thu, 12 Jul 2018 12:37:54 GMT https://community.splunk.com/t5/Splunk-Search/Convert-Craig-40gmail-com-to-craig-gmail-com/m-p/433207#M168356 richgalloway 2018-07-12T12:37:54Z https://community.splunk.com/t5/Splunk-Search/Convert-Craig-40gmail-com-to-craig-gmail-com/m-p/433208#M168357 <P>+1 for urldecode function use.</P> Thu, 12 Jul 2018 15:24:03 GMT https://community.splunk.com/t5/Splunk-Search/Convert-Craig-40gmail-com-to-craig-gmail-com/m-p/433208#M168357 somesoni2 2018-07-12T15:24:03Z