Hi folks
I'm providing a sample of many values I have for field: username
Field: username
Value:
Roger Smith
Bob Dole
Randy Savage
I'm trying to create another field with the EVAL command called EMAIL and placing a dot between first name and last name followed by @falcon.com
Basically I'm trying to get the new field like this.
Field: Email
Roger.Smith@falcon.com
Bob.Dole@falcon.com
Randy.Savage@falcon.com
What would the syntax be?
Thanks in advance
You should try something like this.
YOUR_SEARCH | eval email= replace(username," ",".")."@falcon.com" | table username email
Sample search.
| makeresults | eval _raw="
username
Roger Smith
Bob Dole
Randy Savage
" | multikv forceheader=1 | eval email= replace(username," ",".")."@falcon.com" | table username email
I stand corrected. It worked. Thank you!
Hello Kamlesh,
My list of username is 1000 entries long so I won't be able to specify it like that.
You should try something like this.
YOUR_SEARCH | eval email= replace(username," ",".")."@falcon.com" | table username email
Sample search.
| makeresults | eval _raw="
username
Roger Smith
Bob Dole
Randy Savage
" | multikv forceheader=1 | eval email= replace(username," ",".")."@falcon.com" | table username email