Splunk Search
Highlighted

sed replace help

Contributor

I am using the following:

eval link=httpreferrer+uripath | top link

and I get

http://www.foxnews.com//static/includes/partners/dma/520.html

I want to remove the double "//" and replace it with just one "/"

I cannot get my regex to work???

Tags (1)
Highlighted

Re: sed replace help

Contributor

|eval httpreferrer = substr(httpreferrer, 1, len(httpreferrer)-1)| eval link=httpreferrer+uri_path |

0 Karma
Highlighted

Re: sed replace help

Legend
... | rex mode=sed field=link "s/\/\//\//"