About ASplunkDummy

ASplunkDummy · ‎01-03-2022

Thanks for your suggestion. I tried this: | eval ComputerName=replace(ComputerName, "^.*","([^\.]+)[\.].+") This should look for any value in FQDN format and replace it with only the server name (every character before the first dot). It does replace the value of ComputerName, but it replaces it with the literal text. It ignores the fact the second part is also a regular expression. I am lost here. What do I miss?

ASplunkDummy · ‎01-03-2022

Dear all, best wishes for 2022. Is it possible to use rtrim to remove all characters out of a search result that come after a specific character? For example, using a FQDN, is it possible to use rtrim to remove every character after the host name (so after the dot)? Original output: server1.domain.com Desired output: server1 I am aware that regex can solve this, but I am looking for alternative options to solve this problem. This solution should ideally be working for any combination of servers and domain names. Any help is welcome.

Posts	2
Solutions	0
Karma Given	5
Karma Received	2
Member Since	‎01-03-2022

Online Status	Offline
Date Last Visited	‎01-19-2022 01:07 PM

Truncate characters after a specific character usi...

Re: Truncate characters after a specific character...

Truncate characters after a specific character usi...