Why does stats commands escape strings to html character?

[kyoung2580]

step1: search commands return strings that has url encoded character

step2: after used urldecode funtion

step3: after used stats commands

what can i do? Any help is highly appreciated.:)

step4: I tried using decrypt2 app, but it doesn't work if the string is long. 

[ITWhisperer]

Part of this is to do with the way data is presented, particularly when there are html tags included. The data is probably still there in its original format - depending on what you ultimately trying to do, does this matter?

[kyoung2580]

I just want result that is easy to read.:)

[kamlesh_vaghela]

@kyoung2580 

your Url decoding works fine. But your data is HTML encoded also. So you need to do html encoding. 

Let me check I have any solution for this,

KV

[kyoung2580]

I tried using decrypt2 app, but it doesn't work if the string is long.:)

[inventsekar]

You meant to say that, the "stats count by param" is not counting as expected?!?!

can you copy paste few examples of the "param" field, thanks. 

Best Regards,
Sekar
my youtube channel for Splunk Newbie Learnings
https://www.youtube.com/@SiemNewbies101/videos

the rex videos playlist: https://www.youtube.com/watch?v=rXT35CnWorw&list=PLIJcAov3YzES8PJSX8gZ8cTHWsjh8KeyG

[kyoung2580]

Stats results are accurate. I just want result that is easy to read.:)