I have a list of usernames of varying lengths. I just need to have the first letter of each username removed. Im guessing it has something to do with ltrim but I dont know what to put in to remove the first random character.
|makeresults |eval msg="sample" | eval result =replace(msg,"^.","")
View solution in original post
.... | eval new_username=substr(username, 1)
Yes, ltrim can do it but get used to using sed like this:
... | rex field=username mode=sed "s/^.//"