https://community.splunk.com/t5/Splunk-Search/How-to-use-replace-in-search/m-p/323387#M96526 <P>Use the <CODE>replace</CODE> function like this:</P> <PRE><CODE>... | eval event_ID=replace(event_id,"@","%40") | ... </CODE></PRE> Tue, 05 Sep 2017 17:33:30 GMT richgalloway 2017-09-05T17:33:30Z https://community.splunk.com/t5/Splunk-Search/How-to-use-replace-in-search/m-p/323386#M96525 <P>Hi</P> <P>How to replace a character in a field value with another character? I have below field value, I have to replace @ with %40.</P> <P>event_id:<BR /> 32323ff-343443fg-43344g-34344-343434fdef@@notable@@33434fdf-3434gfgfg-ere343</P> <P>I'm trying to get this</P> <P>32323ff-343443fg-43344g-34344-343434fdef%40%40notable5%40%4033434fdf-3434gfgfg-ere343</P> Tue, 05 Sep 2017 16:59:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-replace-in-search/m-p/323386#M96525 kiran331 2017-09-05T16:59:32Z https://community.splunk.com/t5/Splunk-Search/How-to-use-replace-in-search/m-p/323387#M96526 <P>Use the <CODE>replace</CODE> function like this:</P> <PRE><CODE>... | eval event_ID=replace(event_id,"@","%40") | ... </CODE></PRE> Tue, 05 Sep 2017 17:33:30 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-replace-in-search/m-p/323387#M96526 richgalloway 2017-09-05T17:33:30Z https://community.splunk.com/t5/Splunk-Search/How-to-use-replace-in-search/m-p/323388#M96527 <P>Unrelated to this query, but for special characters like period (.) use the escape character -"\".<BR /> Like - <CODE>... | eval name = replace("lastname.firstname","\.",",") | ...</CODE></P> Wed, 30 May 2018 13:13:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-replace-in-search/m-p/323388#M96527 Dawson014 2018-05-30T13:13:17Z