Hello,
I have a lookup file with data in following format
name _time
srv-a.xyz.com 2017.07.23
srv-b.wxyz.com 2017.07.23
I want to replace .xyz.com with w...
Hello, I need to remove the values found (string) from another field. Ex. FIELD1 - abcmailingxyz LIST - mailing, ... Using | eval foundIt=if(match(FIELD1,$LIST$),"X",".") I am able to...
Hi all, I have an alert that looks for a specific message that includes the record ID. I would like to be able to create a numeric value for that ID that could be used to create a unique ID when ra...
Hi guys, I'm trying to replace values in an irregular multivalue field. I don't want to use mvexpand because I need the field remains multivalue. Here some examples of my multivalues fields #1 1...
I had a field of this value
nameSpaces = ["url1"]
nameSpaces = ["url1", "url2"]
I got rex to change ["url1", "url2"] into "url1, url2"
However, I am trying to change url1 to a labe...
How can we use case insensitive value in Replace command-
| replace "name" with "entity" in description
will it replace name , NAME, Name, NaMe etc with entity ????
If not how can we i...
Background
I have a log file where I have extracted some fields. I am trying to parse a field to get the numeric values it has using replace but it is not working and I don't understand why.
P...
Hello everyone, I was wondering if this kind of search is possible. I want to replace the text from my search which looks like this: eventtype=zyxel_user sourcetype="zyxel-fw" msg="Failed login a...
Hello, I have the following situation - in the original files I have the following information in the field: ServerName1 ServerName10 I need to replace the values in the output to be s...
...ields using rex command command and not able to move further on how to replace the value in the query . Any help would be appreciated. Thanks in advance. Harris