How to rex field to a field

[racans]

I have a rex as such:

| rex field=host "(?<sydney>10-92-3[2-4])" | rex field=host "(?<melbourne>10-92-11[0-2])"

which returns 2 fields. sydney and melbourne

Now I want to have the fields returned to a field city. How can i do this?

[HiroshiSatoh · Accepted solution]

If you use REX

| makeresults |eval host ="10-92-110"|eval city=host 
| rex field=city mode=sed "s/10-92-3[2-4]/sydney/g" 
| rex field=city mode=sed "s/10-92-11[0-2]/melbourne/g"

In my case I use LOOKUP to convert.