What regular expression should I use to eliminate a character in the field value?

[kiran331]

Hi

What Regex do I have to use to eliminate a character in the field value?

eg:
G0:1K:BF:04:12:2C
expected: G01KBF04122C

[sundareshr · Accepted solution]

Replace should do it as well

| eval newfield=replace(oldfield, ":", "")

[schose]

regex should work as descripted. another possibility is to crate/eval a new field

your_search | eval macnew = replace(mac_field, ":","")

Regards,

Andreas

[inventsekar]

Please check this

| rex mode=sed "s/\://g"

for learnings,
mode=sed --- to update rex to use sed mode
s/ --- search for
":" ---- escaped ":"
"//" ---- replace it with "empty" string (remove)
/g ----- do this search and replace globally.