Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to do 2 parameters rex mode=sed ?

$
0
0
Hello Guys, It's possible 2 parameters rex mode=sed in sequence ? I can change ab for 01 and ac for 02 I try this, but not work: | rex mode=sed field=_raw "s/ab/01/g;s/ac/02/g" Error: Error in 'rex' command: Failed to initialize sed. Invalid option string: g;s/ac/02/g or i need to use 2 rex mode=sed field=_raw , 1 for change ab for 01and other for change ac for 02 ?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>