Hey All,
I have the following issue. There is a lookup table I am using within a query in where some items are returned with quotes and some are not. I have the following query and I need to ensure all the results are returned without quotes.
My final query looks as follows:
I know these quotes are causing issues with my final lookups. Any help is greatly appreciated.
Try something like this (run anywhere sample search, adjust per your need)
| makeresults | eval temp=split("This is #sample #search with format# command","#") | table temp| mvexpand temp | rename temp as search | format | eval search=replace(search,"\"","")
Try something like this (run anywhere sample search, adjust per your need)
| makeresults | eval temp=split("This is #sample #search with format# command","#") | table temp| mvexpand temp | rename temp as search | format | eval search=replace(search,"\"","")
The values are quoted if they contain, for example, spaces. You could the spaces with underscores for example before they are returned and perhaps switch them back afterwards?
| eval search=replace(search," ","_")
| format "" "" "" "" "" ""