How to remove "\n" character from string

guest_123 — Tue, 28 Jun 2022 11:44:44 GMT

I have a serialized json string like below

"{\n \"ID\": \"da419500-f6b4-11ec-8b49-025041000001\",\n \"Name\": \"splunk\",\n \"message\": \"demo\",\n \"tracePoint\": \"START\",\n \"priority\": \"ERROR\",\n \"flowName\": \"demo1\",\n \"timestamp\": \"2022-06-27T16:33:17.175289Z\",\n \"content\": {\n \"payload\": {\n \"message\": \"Hello world!\"\n }\n }\n}"

I need to remove all the "\n" form this string

"{ \"ID\": \"da419500-f6b4-11ec-8b49-025041000001\", \"Name\": \"splunk\", \"message\": \"demo\", \"tracePoint\": \"START\", \"priority\": \"ERROR\", \"flowName\": \"demo1\", \"timestamp\": \"2022-06-27T16:33:17.175289Z\", \"content\": { \"payload\": { \"message\": \"Hello world!\" } } }"

I tried rex field=myField mode=sed "s/\\n/ /g" and also replace function both seems to be not helping

Re: How to remove "\n" character from string

isoutamo — Tue, 28 Jun 2022 11:55:22 GMT

You should add one more \ to rex cmd like

| rex mode=sed field=myField "s/\\\n/ /g"

Re: How to remove "\n" character from string

guest_123 — Tue, 28 Jun 2022 12:12:30 GMT

thank you @isoutamo

topic Re: How to remove "\n" character from string in Splunk Search

How to remove "\n" character from string

Re: How to remove "\n" character from string

Re: How to remove "\n" character from string