<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Is there a way to copy a field and not rename it? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-copy-a-field-and-not-rename-it/m-p/343993#M101908</link>
    <description>&lt;P&gt;Like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| eval field1_copy=field1 | table field1 field1_copy
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Thu, 09 Mar 2017 16:56:42 GMT</pubDate>
    <dc:creator>woodcock</dc:creator>
    <dc:date>2017-03-09T16:56:42Z</dc:date>
    <item>
      <title>Is there a way to copy a field and not rename it?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-copy-a-field-and-not-rename-it/m-p/343992#M101907</link>
      <description>&lt;P&gt;I need to display _time field1 field1 where field 1 and field 1 are the same, however if you try to do this it wont display the second field.&lt;BR /&gt;
so renaming wont work.&lt;/P&gt;

&lt;P&gt;so i need&lt;BR /&gt;
_time field1 field1_copy&lt;/P&gt;

&lt;P&gt;however i cant seem to find a copy command.&lt;/P&gt;

&lt;P&gt;I have tried autoregress task_name AS task_name_n p=1, but i lose one value&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 13:09:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-copy-a-field-and-not-rename-it/m-p/343992#M101907</guid>
      <dc:creator>robertlynch2020</dc:creator>
      <dc:date>2020-09-29T13:09:26Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to copy a field and not rename it?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-copy-a-field-and-not-rename-it/m-p/343993#M101908</link>
      <description>&lt;P&gt;Like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| eval field1_copy=field1 | table field1 field1_copy
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 09 Mar 2017 16:56:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-copy-a-field-and-not-rename-it/m-p/343993#M101908</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2017-03-09T16:56:42Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to copy a field and not rename it?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-copy-a-field-and-not-rename-it/m-p/343994#M101909</link>
      <description>&lt;P&gt;cheers &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 09 Mar 2017 17:14:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-copy-a-field-and-not-rename-it/m-p/343994#M101909</guid>
      <dc:creator>robertlynch2020</dc:creator>
      <dc:date>2017-03-09T17:14:04Z</dc:date>
    </item>
  </channel>
</rss>

