c= US
Language = abcdENGLISH123qw
..... | rex fields=Language "\w{4}(?<myval>)\d{4}"
| eval ans=case(c="US",myval, true(), "NA" ) | table ans, myval, c
Result
ans = NA
myval = English
c = US
I want the ans = English
Can you please try this?
YOUR_SEARCH
| rex field=Language "^[a-zA-z]{4}(?<myval>\w+)\d{3}"
| eval ans=case(c="US",myval, true(), "NA" )
| table ans, myval, c
My Sample Search :
| makeresults
| eval c="US",Language="abcdENGLISH123qw"
| rex field=Language "^[a-zA-z]{4}(?<myval>\w+)\d{3}"
| eval ans=case(c="US",myval, true(), "NA" )
| table ans, myval, c
Thanks
KV
▄︻̷̿┻̿═━一
If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.