Skip to content
Please update to the latest release 0.77.3 to address Multiple CVEs.
VQL Reference
Frequently Used
regex_transform

regex_transform

Function
Arg Description Type
source The source string to replace. string (required)
map A dict with keys reg, values substitutions. ordereddict.Dict (required)
key A key for caching string

Description

Search and replace a string with multiple regex. Note you can use $1 to replace the capture string.

SELECT regex_transform(source="Hello world", map=dict(
   `^Hello`="Goodbye",
   `world`="Space"), key="A")
FROM scope()