Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Need SEDCMD Help.

$
0
0
I have a csv that is coming in and we want to replace anything in the name section with "XXXX" Sample events "2019-04-16 15:02:42",,22290412_163115_00725.pdf,111111,,,,,--------Please Select Member --------, 0000, 000,AlertID-000000,AlertID-000000,AlertID-000000,Success,"Get New File",1,Prod,UserName,COMPANYNAME,WSH4109162,Pega Robotics,8.0.2009,CareAlerts Provider Feedback,1.38, "2019-04-17 11:43:15",123470044,20190415_115516_00257.pdf,4000146,Provider,123612,General Feedback , 123456789,Jane L Doe , 0000, 000,123758-100000,123233-100000,AlertID-000000,Failed,"General Feedback : AlertID not found or not enabled.",13,Prod,username,CompanyName,WSWH4051106,Pega Robotics,8.0.2009,CareAlerts Provider Feedback,1.38, So in these events the following strings should be replaced with XXXX --------Please Select Member -------- Jane L Doe I've gotten this extraction from Splunk for the field, but it does not work in SEDCMD. SEDCMD-CSV1 = s/(?ms)^(?:[^,\\n]*,){8}(?P[^,]+)/XXXX/g

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>