https://community.splunk.com/t5/Splunk-Search/How-to-trim-the-results-of-a-field/m-p/245968#M73349 <P>Rex can do the job. Use this in place of the current eval command.</P> <PRE><CODE>... | rex field=managedBy "CN=(?&lt;manager&gt;[^,]+)" | ... </CODE></PRE> Wed, 11 May 2016 15:40:37 GMT richgalloway 2016-05-11T15:40:37Z https://community.splunk.com/t5/Splunk-Search/How-to-trim-the-results-of-a-field/m-p/245967#M73348 <P>Hi</P> Wed, 11 May 2016 14:58:07 GMT https://community.splunk.com/t5/Splunk-Search/How-to-trim-the-results-of-a-field/m-p/245967#M73348 kranthi851 2016-05-11T14:58:07Z https://community.splunk.com/t5/Splunk-Search/How-to-trim-the-results-of-a-field/m-p/245968#M73349 <P>Rex can do the job. Use this in place of the current eval command.</P> <PRE><CODE>... | rex field=managedBy "CN=(?&lt;manager&gt;[^,]+)" | ... </CODE></PRE> Wed, 11 May 2016 15:40:37 GMT https://community.splunk.com/t5/Splunk-Search/How-to-trim-the-results-of-a-field/m-p/245968#M73349 richgalloway 2016-05-11T15:40:37Z https://community.splunk.com/t5/Splunk-Search/How-to-trim-the-results-of-a-field/m-p/245969#M73350 <P>Ya got it. Thanks</P> Wed, 11 May 2016 16:04:45 GMT https://community.splunk.com/t5/Splunk-Search/How-to-trim-the-results-of-a-field/m-p/245969#M73350 kranthi851 2016-05-11T16:04:45Z