Splunk Search

Replace command -Ignore case

shugup2923
Path Finder

How can we use case insensitive value in Replace command-
| replace "name" with "entity" in description

will it replace name , NAME, Name, NaMe etc with entity ????

If not how can we ignore case with replace command.

0 Karma
1 Solution

renjith_nair
Legend

@shugup2923

Try

| eval description=replace(description,"(?i)name","entity")
---
What goes around comes around. If it helps, hit it with Karma 🙂

View solution in original post

renjith_nair
Legend

@shugup2923

Try

| eval description=replace(description,"(?i)name","entity")
---
What goes around comes around. If it helps, hit it with Karma 🙂
Get Updates on the Splunk Community!

Index This | What’s a riddle wrapped in an enigma?

September 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...