For example, I have name=domain\\username, but I want to remove the extra slash.
Solved
How would I go about replacing text within an event?
Best answer by pie
The Mask function will work. In Mask, specify the pattern, and replacement expression. Then* below that, the fields you want to apply to. i.e. _raw or specific fields.
Sign up
Already have an account? Login
Login to the community
No account yet? Create an account
Using your Cribl Curious or University Account
User Login Employee loginEnter your E-mail address. We'll send you an e-mail with instructions to reset your password.
