This should get you what want you need:
<base search> | eval temp=if(length(seq)<2,"0"+seq,seq) | eval this_move=temp+"-"+screen
I split it into two eval statements to make it easier to understand what's going on, but you can consolidate it into a single eval statement if you prefer.
Note: I assume that "screen" is a string field that you want to concatenate with "seq" field
Hope this helps
This should get you what want you need:
<base search> | eval temp=if(length(seq)<2,"0"+seq,seq) | eval this_move=temp+"-"+screen
I split it into two eval statements to make it easier to understand what's going on, but you can consolidate it into a single eval statement if you prefer.
Note: I assume that "screen" is a string field that you want to concatenate with "seq" field
Hope this helps
thanks for your help