https://community.splunk.com/t5/Splunk-Search/How-to-add-the-regex-in-datamodel-and-use-in-tstats/m-p/317070#M94854 <P>Want to add the below logic in the datamodel and use with tstats </P> <P>| eval _raw=replace(_raw,"\","null") |rex "NetworkSetting&gt;International\sRoaming\sBar(?s).<EM>?&lt;.</EM>?NewValue&gt;(?[^&lt;]*)"</P> Tue, 29 Sep 2020 18:54:20 GMT payal23 2020-09-29T18:54:20Z https://community.splunk.com/t5/Splunk-Search/How-to-add-the-regex-in-datamodel-and-use-in-tstats/m-p/317070#M94854 <P>Want to add the below logic in the datamodel and use with tstats </P> <P>| eval _raw=replace(_raw,"\","null") |rex "NetworkSetting&gt;International\sRoaming\sBar(?s).<EM>?&lt;.</EM>?NewValue&gt;(?[^&lt;]*)"</P> Tue, 29 Sep 2020 18:54:20 GMT https://community.splunk.com/t5/Splunk-Search/How-to-add-the-regex-in-datamodel-and-use-in-tstats/m-p/317070#M94854 payal23 2020-09-29T18:54:20Z https://community.splunk.com/t5/Splunk-Search/How-to-add-the-regex-in-datamodel-and-use-in-tstats/m-p/317071#M94855 <P>You can refer this doc:</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.0.3/Knowledge/Addaregularexpressionattribute">https://docs.splunk.com/Documentation/Splunk/7.0.3/Knowledge/Addaregularexpressionattribute</A></P> Mon, 09 Apr 2018 06:28:21 GMT https://community.splunk.com/t5/Splunk-Search/How-to-add-the-regex-in-datamodel-and-use-in-tstats/m-p/317071#M94855 p_gurav 2018-04-09T06:28:21Z https://community.splunk.com/t5/Splunk-Search/How-to-add-the-regex-in-datamodel-and-use-in-tstats/m-p/317072#M94856 <P>Adding simple fields is fine but i want to add this replace logic in my dashboards and then use the same with my tstats query </P> Mon, 09 Apr 2018 06:49:19 GMT https://community.splunk.com/t5/Splunk-Search/How-to-add-the-regex-in-datamodel-and-use-in-tstats/m-p/317072#M94856 payal23 2018-04-09T06:49:19Z