how to remove last character of a field value from the search results

[muthvin]

how to remove last character of a field value from the search results

[jmallorquin · Accepted solution]

Hi,

With rex you can do this

| rex field=yourfield "(?<no_last>.*)."

Hope help you

[muthvin]

thx for your reply jmallorquin, but i need more clarity on your suggestion .
Also i tried |eval field=rtrim(yourfield,"****") which helped me.

It will be great if you help me in understanding your view mentioned above.

• Muthu

[jmallorquin]

Sure,

With my command i match all the characters less the last one in a new field called no_last