How would I go about replacing text within an event?

For example, I have name=domain\username, but I want to remove the extra slash.

The Mask function will work. In Mask, specify the pattern, and replacement expression. Then* below that, the fields you want to apply to. i.e. _raw or specific fields.