Hi there,
I've set up a dashboard with various columns, one of them outputs a number field which has a comma(,) in it. I can remove the comma using the following command rex field=SurveyAnswers mode=sed "s/\,//g" where SurveyAnswers is the table name. This works fine in a separate search, however the same command doesn't work when I try to update it in my dashboard and save. Any ideas ??? Thanks
Please share the full dashboard query where SurveyAnswers is being modified.
HI @richgalloway here is the query.
index=adobe sourcetype=marketing "voiceofcustomerdetail" records(s)
|rex field=_raw "^(?:[^\t\n]*\t){6}(?P<SurveyAnswers>[^ ]+)"
|sort -_time
|eval Date = strftime(_time,"%Y-%m-%d %H:%M:%S")
|eval Status=if(isnotNull(Date),"Processed","NOK")
|rex mode=sed field=SurveyAnswers "s/,//"
|table Date SurveyAnswers Status