Hi
What Regex do I have to use to eliminate a character in the field value?
eg:
G0:1K:BF:04:12:2C
expected: G01KBF04122C
Replace should do it as well
| eval newfield=replace(oldfield, ":", "")
Replace should do it as well
| eval newfield=replace(oldfield, ":", "")
regex should work as descripted. another possibility is to crate/eval a new field
your_search | eval macnew = replace(mac_field, ":","")
Regards,
Andreas