...d}
wapi/v3/gat/{Id}/cust/api
Basically in the fields , it should only take alphapets (including that v3) and we should replace digits to {Id} whereever it exist .
Can someone h...
Hi,
I have the below urls. How can I use the regex to remove the tokens from urls? Looking to remove data between /interactions/ and result_data.
sample:
https://test.com:443/test11/interact...
Hi Splunker,
I would like to know and learn how to replace ^ns4: with <
Please find below dummy data.
^ns4:ChannelName>PublicSales
^ns4:Result>SUCCESS^/ns4:Result>
P...
Hello, | dbxquery connection=test query="select employee_data from company" The following employee_data is not in proper JSON format, so I can't use spath. How do I replace single quote (') w...
Background
I have a log file where I have extracted some fields. I am trying to parse a field to get the numeric values it has using replace but it is not working and I don't understand why.
P...
I need some help figuring out why my sed replace command is replacing all of the text to the end of the event in Splunk rather than just the specific text I had it look for. As part of a GDPR-c...
Hello folks,
I am experiencing problems to use replace to change a field value like "qwerty\foo" to "qwerty\foo".
I am testing it with this query
| makeresults
| eval user="qwerty\f...
Hi Guys! i've got the next situation
Trying to replace some characters in this events:
\device\harddiskvolume4\windows\system32\dns.exe
\device\harddiskvolume4\windows\system32\lsass.exe
\d...
I had a field of this value
nameSpaces = ["url1"]
nameSpaces = ["url1", "url2"]
I got rex to change ["url1", "url2"] into "url1, url2"
However, I am trying to change url1 to a labe...