How to create a field from another field?

[lys1030]

I have a field "F1" with values as following:

I want to add a filed "F2" with value 'a' to all 'a*', with value 'b' to all 'b*'.

What should I do?
Thanks in advance!

[woodcock]

Like this:

| eval F1 = substr(F2,1,1)

[MuS · Accepted solution]

Hi lys1030,

try this little regex:

your base search here | rex field=F1 "(?<F2>[a-zA-Z])" | table F1 F2

Hope this helps ...

cheers, MuS