I have a field which is a username, but the results of the username starts with "USR" and the actual username is "USRAjames".
I actually need to get the "A" and the "james" and put it in seperate field.
Thoughts?
A simplistic one ; - ) - USR(?<afield>A)(?<name>.*)
you can try this
rex field=username "USR(?<fname>\w{1})\w+"| rex field=username "USR\w{1}(?<lname>\w+)"