Splunk Search

Remove $ (dollar) characters in field results

numeroinconnu12
Path Finder

Morning, everyone,

Thank you in advance for your help.

I would like to remove a part of a character from my results.

My query results look like this:

j2874a8B$

I'd like to delete the $ to get it:

j2874a8B

How do I proceed? Thank you very much.

Labels (3)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| rex field=result mode=sed "s/\$//g"

View solution in original post

0 Karma

numeroinconnu12
Path Finder

Thank you @ITWhisperer  it's work.  

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| rex field=result mode=sed "s/\$//g"
0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...