Hi, I have a "|dbquery" which returns an User ID, and I want to use this UserID to find an User's location bia "|ldapsearch", splunk doesn't allow these two real time search together in one search, is there any other way I can do this ?
... View more
Thanks MuS, that works perfect in the search, however, do you know how to replace it in the label?
I tried above, it works ok in raw data, but when put it into a table format, it still shows the name with __b in it. same to the chart, if I build a chart, the label still shows the unformated text, any idea how should I get this one done?
Cheers
... View more
Thanks MuS, that works perfect in the search, however, do you know how to replace it in the label?
I tried above, it works ok in raw data, but when put it into a table format, it still shows the name with __b in it. same to the chart, if I build a chart, the label still shows the unformated text, any idea how should I get this one done?
Cheers
... View more
Hi Gurus,
I have a index, and the data was in one column is like
Item__bAffected , I'd like to replace " __b " with a " "(space), so it will look like
" Item Affected "
however, I don't know how to used regular expression to replace the string, or its more easier to filter them out before input in to index?
any idea?
THanK you.
... View more