Field extraction based on position of character

[mbasharat]

Hi,

I have field that gives me NETBOS of a Host.

Sample Host Name: 123456W12345678

The 7th character makes the identification for whether it is server or not a server.

How to extract this 7th character into a new field "Classification"? Result using above example should be:
field name=Classification
field value=W

Thanks in advance!!!

[mayurr98 · Accepted solution]

try this :

| makeresults | eval host="123456412345678" | rex field=host "(\d{6}|\w{6})?(?<Classification>\w{1})"

[mbasharat]

Worked. THANKS!!!