Hello, I Need to know how can I trim a string from the begining until a specific character. For example, I have the the field data which contains emails so how can I trim the emails until "@" and let the rest in the field.
Thank you for your help 🙂
| eval email="XXXXX@blabla.com"
| eval result = replace(email,"^[^\@]+","")
It's rex to the rescue. Try this.
... | rex mode=sed field=foo "s/[^@]+(@.*)/\1/" | ...