replace command: Overview, syntax, and usage

The SPL2 replace command replaces field values in your search results with the values that you specify.

The SPL2 replace command replaces field values in your search results with the values that you specify. This command does not replace values in fields generated by stats or eval functions. If you do not specify a field, the value is replaced in all non-generated fields.

Syntax

The required syntax is in bold.

replace

str=value

replacement=value

[field-list]

Required parameters

str

Syntax: str=value

Description: A field value that you want to replace. You can use the asterisk ( * ) wildcard character to match similar values.

replacement

Syntax: replacement=value

Description: A replacement value. You can use the asterisk ( * ) wildcard character to match similar values.

Optional parameters

field-list

Syntax: field, ...

Description: A comma-separated list of one or more field names to replace the values in.

See also

replace command

replace command: Examples