can i replace the _raw data with my own data ??

[rakesh_498115]

HI..

can i replace the _raw data value with my default data value only for the display purpose only ??

[Ayn · Accepted solution]

Yes, you can.

[Ayn]

...or if you just want to change how it's displayed, but leave the value intact if you have other things using that in your search, use fieldformat.

... | fieldformat _raw=<yourdata>

[Ayn]

... | eval _raw=

[rakesh_498115]

can you give me the command or query for doin that ??