I am browsing to look for a solution to this issue and eventually accidentally found a solution myself. Try if this will work for you.  search sourcetype=type1 field1='$arg1$' | rename field2 as query | fields query | eval newField=query  Single quotes will return the value of the field in an eval expression. ... View more