Hi
| makeresults
| eval foo="\\\\sent134"
| fields - _time
```above generates testdata like "\\sent134" ```
| rex mode=sed field=foo "s/\\\//g"
previous should work. If needed add/remove \-characters (as usually 😉
r. Ismo
Thanks @isoutamo
Hi
| makeresults
| eval foo="\\\\sent134"
| fields - _time
```above generates testdata like "\\sent134" ```
| rex mode=sed field=foo "s/\\\//g"
previous should work. If needed add/remove \-characters (as usually 😉
r. Ismo