We have updated our Terms of Service, Code of Conduct, and Addendum.

How would I go about replacing text within an event?

Tony Reinke - Cribl
Tony Reinke - Cribl Posts: 134 admin
in General Discussions

For example, I have name=domain\\username, but I want to remove the extra slash.

Tagged:

Best Answer

  • pie
    pie Posts: 22 ✭✭
    Answer ✓

    The Mask function will work. In Mask, specify the pattern, and replacement expression. Then* below that, the fields you want to apply to. i.e. _raw or specific fields.

Answers

  • pie
    pie Posts: 22 ✭✭
    Answer ✓

    The Mask function will work. In Mask, specify the pattern, and replacement expression. Then* below that, the fields you want to apply to. i.e. _raw or specific fields.

Categories