All Apps and Add-ons

I have a task name = xyz. I want to edit its name and use it in my query as xy . Is that possible?

shrey12
Explorer
 
0 Karma

stephanefotso
Motivator

Yes! you can extract xy in the name field and use it as you want. Something like this

...|rex field=name "(?<mynewfield>your regex)"|table mynewfield

Now you have a new field called mynewfield with the value of what you have extracted in name field. Let say xy, and you can use it after the extraction .
Thanks

SGF
0 Karma

chimell
Motivator

Hi shrey12
Do you want to extract xy in "name = xyz" string ?
Please let me know

0 Karma

shrey12
Explorer

yes do you know how to do that ?

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...

Explore the Latest Educational Offerings from Splunk [January 2025 Updates]

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...