Skip to main content
Solved

How would I go about replacing text within an event?

  • Mar 11, 2025 3:25 AM UTC
  • 1 reply
  • 96 views

For example, I have name=domain\\username, but I want to remove the extra slash.

Best answer by pie

The Mask function will work. In Mask, specify the pattern, and replacement expression. Then* below that, the fields you want to apply to. i.e. _raw or specific fields.

View original

    1 reply

    • pie
    • Participating Frequently
    • Answer
    • Mar 11, 2025 3:41 AM UTC

    The Mask function will work. In Mask, specify the pattern, and replacement expression. Then* below that, the fields you want to apply to. i.e. _raw or specific fields.

    Terms & ConditionsAccessibility statement