How to replace backslash by double backslash using eval in search and props.conf

[jay]

for example :  C:\user\process  -->  C:\\user\\process

[manan_amin · Accepted solution]

In Eval, We can use string format function (replace) to replace "\" by two "\\". 

Here, We need to escape "\" two times,

One of the way to replace it,

props.conf 

EVAL-new_path = replace(path ,"(\\\\)","\\\\\1")

in Search Query:

| eval new_path = replace(path ,"(\\\\)","\\\\\1")