Skip to main content
Solved

How would I go about replacing text within an event?

  • March 11, 2025
  • 1 reply
  • 18 views

For example, I have name=domain\\username, but I want to remove the extra slash.

Best answer by pie

The Mask function will work. In Mask, specify the pattern, and replacement expression. Then* below that, the fields you want to apply to. i.e. _raw or specific fields.

1 reply

  • Participating Frequently
  • Answer
  • March 11, 2025

The Mask function will work. In Mask, specify the pattern, and replacement expression. Then* below that, the fields you want to apply to. i.e. _raw or specific fields.