Is it possible with EVAL do the following? I have a field named version which brings the value like this:
Version
60101228
50201315
but I would like to change it for the following (and maintain the original)
Version
" 60101228 or 6.1.1228"
"50201315 or 5.2.1315"
Where a 0 (zero) is replaced for a dot (.). I need this because later I will need both values in a dynamic drop-down search in which values can appear in both ways.
Can eval do this? Maybe other function? thanks!
Try this
index=* usearch | rex "\"version\": \"(?\w*)\"" | dedup Version | eval version = replace(version,"0",".") | table Version
Regex: group name must start with a non-digit...