Hi, I am having trouble getting replace to work correctly in Ingest Processor and have this example. In SPL I can run this search: | makeresults
| eval test = "AAABBBCCC"
| eval text = "\\\"test\\\":\\\""
| eval output = replace(test, "BBB", text) and I will get this output But if I run this in a Ingest Processor pipeline | eval test = "AAABBBCCC" | eval text = "\\\"test\\\":\\\"" | eval output = replace(test, "BBB", text) The result is: Note the slashes before the doublequotes have gone. Why have they gone? How do I ensure they are retained by Ingest Processor. This is a simplified example of what I am trying to do but this is the core of the problem I am having. Thanks
... View more