Hi, I extracted a field and am viewing it in a table. But some data has a comma (,) in between. I want to create a new column without the comma ** and whatever comes **after the comma should not be there in that field.
please help me to come up with a solution!
Add this to your existing search:
... | rex field=YourExistingFieldName "^(?<YourNewFieldName>[^#]+)"
View solution in original post
I want it should get split only alphabets followed by a #, if a space is followed by a #. then i don't want to. can you please help me to do it
... | rex field=YourExistingFieldName "^(?[^#\s]+)"