rex command

Splunk Search

need help on removing only endpoint from the data set

input : output:

Endpoint CD/DVD CD/DVD

Endpoint Cloud Storage Cloud Storage

1 Solution

Solution

| eval output=replace(input,"Endpoint ","")

Solution

| eval output=replace(input,"Endpoint ","")

Get Updates on the Splunk Community!

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Ditch the Manual Grind: Building AI Agents with Splunk Let’s be real: your team’s time is being eaten alive. ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Join the Conversation