Hello all,
I have a field that contains hypens in the value. For example, 20.0--(1259).
I am simply trying to replace it with space, but it does not work. could you tell me what am I doing wrong?
index=main
| eval version_name = replace(version, "-", " ")
Your code looks OK - unless your real field name has special characters in - in which case, put it in single quotes.
Your code looks OK - unless your real field name has special characters in - in which case, put it in single quotes.
Please explain what you mean by "it does not work". Your code works fine in my Splunk sandbox. "20.0--(1259)" becomes "20.0 (1259)".