About jmaguire1992

jmaguire1992 · ‎03-30-2016

I figured it out - Here is the answer for anyone who might need it. SEDCMD-testdata_anonymizer = s/(.*)<testfield>[\s\S]*?<\/testfield>.*/\1 <testfield>xxxx<\/testfield>/g

DMohn · ‎09-12-2017

You can modify the regex to capture only the next three digits after 'testfield:' this way: REGEX = (?m)testfield:\s+(\d{3}) FORMAT = testfield:\sxxxx This will capture any string 'testfield:' followed by a space and three digits.

Posts	4
Solutions	1
Karma Given	1
Karma Received	0
Member Since	‎03-09-2016

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Anonymize only Child Nodes

Anonymize Data in Splunk Search

Re: Anonymize only Child Nodes

Re: Anonymize Data in Splunk Search