How to replace random substring in path?

[SplunkNewbie100]

Hi all,

I  want to replace random substrings in path:

C:\Users\sjfklsj\Appdata\.... -> C:\Users\---\Appdata\....

C:\Users\aegdfedg\Appdata\.... -> C:\Users\---\Appdata\....

etc..

So I want to remove the random username from the path.
Thank you!

[ITWhisperer]

| rex mode=sed "s/(?<x>Users\\\)(?<random>[^\\\]+)/\\1---/g"

[yuanliu]

A slightly more semantic approach could be

| eval path = split(path, "\\")
| eval path = mvjoin(mvappend(mvindex(path, 0, 1), "---", mvindex(path, 3, -1)), "\\")