I'm trying to create own Splunk (dashboard) queries for Okta data analysis. I'm having issues because a specific field has a space in the value and it's causing the dashboard to not be able to retrieve data (when I know there is data). 3 other drop-down menus work fine (there is no spaces in the values there). My main suspicion that the reason of failure is because of that spaces.  I'm trying to transform the values and remove spaces, in the hope that would help.  I Found some recommendations online and examples of functions, but I'm not very experienced with Splunk, can anyone explain step by step how I could solve that issue? If the name of my field with issues is "actor.displayName"  (it has multiple spaces in the values). Examples found online: 1) | rex mode=sed field=A "s/ //g" 2) | eval nospace=trim(A) 3)| rex field=field1 "(?<newfield>\S+)" 4)|eval NewField=trim(OldField) Has anyone encountered this issue before? Thanks for help! ... View more