Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

replace string in field value using eval or sed

$
0
0
I have one field(query) value like select * from host where id = 'something' and name = 'xxxxxx' Now I want to replace id and name with '?' I have tried with rex and sed something like rex field=query mode=sed "s/name*./?/g" and also using eval filed=replace.... but i didn't find the solution can any one please help me with this

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>