I want to remove a number (up to 5 digits) from a string on its beginning.
43.aaaavvvvv.cccccc:dddddd => aaaavvvvv.cccccc:dddddd
9374.aaaavvvvv.cccccc:dddddd => aaaavvvvv.cccccc:dddddd
1.aaaavvvvv.cccccc:dddddd => aaaavvvvv.cccccc:dddddd
I only need to remove the first number and the "." after it.
@matansocher, is this a field or raw data?
You can try the following
<your base search> | rex field=_raw "\d+.(?<myData>.*)" | table _raw myData
I have use field name as _raw but you can replace with your own if it is some other field. Alternatively you can also use
replace() command with regular expression if this is a field.
This produces this message:
"Error in 'rex' command: Encountered the following error while compiling the regex '^(?P[^.]+)': Regex: unrecognized character after (?P"