https://community.splunk.com/t5/Splunk-Search/Adjust-fieldvalue-regex/m-p/190795#M54921 <P>Hi </P> <P>if the length of this field is fixed , you can try this </P> <P><IMG src="http://answers.splunk.com//storage/2014-06-06_17-36-54.png" alt="alt text" /></P> Fri, 06 Jun 2014 09:39:00 GMT dmlee 2014-06-06T09:39:00Z https://community.splunk.com/t5/Splunk-Search/Adjust-fieldvalue-regex/m-p/190794#M54920 <P>Hi,</P> <P>I've got some fieldvalues like this:</P> <PRE><CODE>field=aaaaaaaabbbbccccddddeeeeeeeeeeee </CODE></PRE> <P>I would like to add a "-" after character 8,12,16 and 20:</P> <PRE><CODE>field=aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee </CODE></PRE> <P>Thanks for your help</P> <P>Heinz</P> Fri, 06 Jun 2014 08:49:54 GMT https://community.splunk.com/t5/Splunk-Search/Adjust-fieldvalue-regex/m-p/190794#M54920 HeinzWaescher 2014-06-06T08:49:54Z https://community.splunk.com/t5/Splunk-Search/Adjust-fieldvalue-regex/m-p/190795#M54921 <P>Hi </P> <P>if the length of this field is fixed , you can try this </P> <P><IMG src="http://answers.splunk.com//storage/2014-06-06_17-36-54.png" alt="alt text" /></P> Fri, 06 Jun 2014 09:39:00 GMT https://community.splunk.com/t5/Splunk-Search/Adjust-fieldvalue-regex/m-p/190795#M54921 dmlee 2014-06-06T09:39:00Z https://community.splunk.com/t5/Splunk-Search/Adjust-fieldvalue-regex/m-p/190796#M54922 <P>Hi dmlee,</P> <P>yes, the length is fixed. "new_Heinz" is exaclty what I need <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> Thanks a lot!</P> Fri, 06 Jun 2014 10:43:39 GMT https://community.splunk.com/t5/Splunk-Search/Adjust-fieldvalue-regex/m-p/190796#M54922 HeinzWaescher 2014-06-06T10:43:39Z