<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Field extraction and field alliasing not working in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Field-extraction-and-field-alliasing-not-working/m-p/481428#M82526</link>
    <description>&lt;P&gt;Please share some sample data.&lt;/P&gt;</description>
    <pubDate>Mon, 16 Sep 2019 13:06:45 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2019-09-16T13:06:45Z</dc:date>
    <item>
      <title>Field extraction and field alliasing not working</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Field-extraction-and-field-alliasing-not-working/m-p/481427#M82525</link>
      <description>&lt;P&gt;I need to rename field and calculate  some field as I mentioned below but it not working at all. &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[Workday]
INDEXED_EXTRACTIONS=csv
KV_MODE=none
MAX_TIMESTAMP_LOOKAHEAD = 32
NO_BINARY_CHECK = true
TIME_FORMAT = %Y%m%d %H:%M:%S
TIME_PREFIX=^
SHOULD_LINEMERGE = false
FIELDALIAS-alias1 = Work_Space_from_Worker_s_Primary_Job AS Work_Space_from_Workers_Primary_Job
EVAL-Continuous_Service_Date=strftime(strptime(Continuous_Service_Date,"%Y%m%d"),"%Y/%m/%d")
EVAL-Effective_Date_for_Current_Position=strftime(strptime(Effective_Date_for_Current_Position,"%Y%m%d"),"%Y/%m/%d")
EVAL-Sysdate=strftime(strptime(Sysdate,"%Y%m%d %H:%M:%S"),"%Y/%m/%d %H:%M:%S") 
EVAL-Future_Hire_Date=strftime(strptime(Future_Hire_Date,"%Y%m%d"),"%Y/%m/%d")
EVAL-Rehire_Date=strftime(strptime(Rehire_Date,"%Y%m%d"),"%Y/%m/%d")
EVAL-Original_Hire_Date=strftime(strptime(Original_Hire_Date,"%Y%m%d"),"%Y/%m/%d")
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Mon, 16 Sep 2019 12:35:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Field-extraction-and-field-alliasing-not-working/m-p/481427#M82525</guid>
      <dc:creator>pal_sumit1</dc:creator>
      <dc:date>2019-09-16T12:35:08Z</dc:date>
    </item>
    <item>
      <title>Re: Field extraction and field alliasing not working</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Field-extraction-and-field-alliasing-not-working/m-p/481428#M82526</link>
      <description>&lt;P&gt;Please share some sample data.&lt;/P&gt;</description>
      <pubDate>Mon, 16 Sep 2019 13:06:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Field-extraction-and-field-alliasing-not-working/m-p/481428#M82526</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2019-09-16T13:06:45Z</dc:date>
    </item>
    <item>
      <title>Re: Field extraction and field alliasing not working</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Field-extraction-and-field-alliasing-not-working/m-p/481429#M82527</link>
      <description>&lt;P&gt;it's a  CSV data , &lt;/P&gt;

&lt;P&gt;"20190621 09:27:02","19257","abc123","EMP","abc","","cdf","Ms.","","abc cdf","orange city","city","hy","12345","United States of America","12345679","&lt;A href="mailto:abcdef@xyz.com"&gt;abcdef@xyz.com&lt;/A&gt;","EMP","Female","50","20071014","20071014","","helloooeooood","20080108","A axcvr","515 acbtc-ase","515 abc123","515abdcfr","","orange city","city","hy","25646","United States of America","","515 asdghfv","ACTIVE_ASSIGN","Regular","Full time-Regular","","Active","40","Channeld","20180708","","Channeld","Channel","SSECHDPG","Sales","Individual Contributor","Other","PG","Exempt","123456","321456","12365","123456","123456","","","","","N","Y","309","73292","Solutions, Inc.","Segment Mgmt","Payroll ","12345","123654","0000","0000","000","00000","Biweekly","Sales","HCS","115","",&lt;/P&gt;</description>
      <pubDate>Mon, 16 Sep 2019 14:26:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Field-extraction-and-field-alliasing-not-working/m-p/481429#M82527</guid>
      <dc:creator>pal_sumit1</dc:creator>
      <dc:date>2019-09-16T14:26:14Z</dc:date>
    </item>
  </channel>
</rss>

