I have one field(query) value like
select * from host where id = 'something' and name = 'xxxxxx'
Now I want to replace id and name with '?'
I have tried with rex and sed something like
rex field=query mode=sed "s/name*./?/g" and also using eval filed=replace....
but i didn't find the solution
can any one please help me with this
The regex is incorrect. It's looking for "nam" followed by any number of "e"s followed by any character. Try this:
| rex field=query mode=sed "s/name/?/g" | rex field=query mode=sed "s/id/?/g"
thanks for your response,
I want to replace name and id value with ?. after replace string the output looks like
select * from host where id = '?' and name = '?'
name and id values are dynamic
That's different, but similar.
| rex field=query mode=sed "s/(name\s*=\s*')[^']+/\1/g" | rex field=query mode=sed "s/(id\s*=\s*')[^']+/\1/g"