All Apps and Add-ons

I have a task name = xyz. I want to edit its name and use it in my query as xy . Is that possible?

shrey12
Explorer
 
0 Karma

stephanefotso
Motivator

Yes! you can extract xy in the name field and use it as you want. Something like this

...|rex field=name "(?<mynewfield>your regex)"|table mynewfield

Now you have a new field called mynewfield with the value of what you have extracted in name field. Let say xy, and you can use it after the extraction .
Thanks

SGF
0 Karma

chimell
Motivator

Hi shrey12
Do you want to extract xy in "name = xyz" string ?
Please let me know

0 Karma

shrey12
Explorer

yes do you know how to do that ?

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...