Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
4,000 results
Sorted by:
07-23-2017
04:02 AM
1 Karma
Hello,
I have a lookup file with data in following format
name _time
srv-a.xyz.com 2017.07.23
srv-b.wxyz.com 2017.07.23
I want to replace .xyz.com with w...
Show results in replies (5)
-
The replace function actually is regex. From the most excellent docs on replace: replace(X,Y...
-
You can try this: | replace "*.xyz.com" with "*.wxyz.com" in name
-
...houldn't answer this here, but the answer is the easy "exactly like you'd expect" in that replace doesn't s...
-
...-Enterprise WindowsServer-2008-R2-Enterprise How would we replace all the "-" characters with a...
-
...apturing groups too. You can do things like replace(Field, ".* something ([A-Za-z]+) .*", "\1") . C...
a month ago
Hello, I need to remove the values found (string) from another field. Ex. FIELD1 - abcmailingxyz LIST - mailing, ... Using | eval foundIt=if(match(FIELD1,$LIST$),"X",".") I am able to...
Labels
- Labels:
-
other
02-04-2021
09:29 PM
Hello, I have the following situation - in the original files I have the following information in the field: ServerName1 ServerName10 I need to replace the values in the output to be s...
Labels
- Labels:
-
rex
10-29-2020
12:29 AM
Hello everyone, I was wondering if this kind of search is possible. I want to replace the text from my search which looks like this: eventtype=zyxel_user sourcetype="zyxel-fw" msg="Failed login a...
Labels
- Labels:
-
regex
Show results in replies (3)
-
...o Device from ssh \(incorrect password or inexistent username\)/SSH/g" You could also explore the replace...
-
Yes, I could use a lookup command but for now I'm gonna use the replace command :). But in the f...
-
Hi Giuseppe, it's a pleasure to know you! Anyway, if you have to replace many strings, you c...
12-15-2020
04:55 AM
@bowesmana Hi, could you please help me in replacing the join in below query? index=168347-np [ | `last_np_sourcetype("index=168347-np","hardware")`] (physicalType=*) | fields p...
- Tags:
- replace join
Labels
- Labels:
-
join
06-19-2019
05:38 AM
How can we use case insensitive value in Replace command-
| replace "name" with "entity" in description
will it replace name , NAME, Name, NaMe etc with entity ????
If not how can we i...
11-07-2020
06:54 AM
Hi guys, I'm trying to replace values in an irregular multivalue field. I don't want to use mvexpand because I need the field remains multivalue. Here some examples of my multivalues fields #1 1...
07-25-2019
07:40 AM
Hello,
I have a question on a conditional find and replace. I have a query that calculates a mean for the different hours on the different days. This query looks like this:
index=index1 a...
11-06-2019
05:00 AM
Background
I have a log file where I have extracted some fields. I am trying to parse a field to get the numeric values it has using replace but it is not working and I don't understand why.
P...
06-12-2017
09:31 AM
I had a field of this value
nameSpaces = ["url1"]
nameSpaces = ["url1", "url2"]
I got rex to change ["url1", "url2"] into "url1, url2"
However, I am trying to change url1 to a labe...
