i want to match the text "followed the escaped error:" and remove the following text till the delimiter dot. it should cut other fields

[DataOrg]

followed the escaped error: "An error has happened executing a dash statement. hello good morning
followed the escaped error: "6g is not a valid for Value of the statement. happy morning

[woodcock]

Like this:

| makeresults 
| eval text="followed the escaped error: \"An error has happened executing a dash statement. hello good morning" 
| rex field=text mode=sed "s/\:[^\.]+//"

[dineshraj9 · Accepted solution]

Can you try replace command -

E.g.

| makeresults | eval text="followed the escaped error: \"An error has happened executing a dash statement. hello good morning" | eval text=replace(text,"\:[^\.]+","")

[DataOrg]

it should not cut other following fields only it should till dot