Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to remove part of a field value?

$
0
0
I have a search that gives me a bunch of fields that look like: REBOOT=4/5/2016 9:17:19 AM REBOOT=4/5/2016 9:12:02 AM REBOOT=4/5/2016 8:58:28 AM How can I remove the REBOOT= and keep the date/time with my search

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>