https://community.splunk.com/t5/Splunk-Search/Alias-bug-that-merge-quot-NEW-quot-word-into-new-field/m-p/444193#M125981 <P>@sonsee78 use the option <CODE>Overwrite field values</CODE> while creating <CODE>Field Alias</CODE> otherwise above is expected behavior.</P> Fri, 28 Jun 2019 03:19:47 GMT niketn 2019-06-28T03:19:47Z https://community.splunk.com/t5/Splunk-Search/Alias-bug-that-merge-quot-NEW-quot-word-into-new-field/m-p/444191#M125979 <P>Hello,<BR /> I have been watching a problem when I was using alias function through the SPLUNK Web.<BR /> That problem was merged "NEW" word, both have Web and CLI.</P> <PRE><CODE>WEB UI Field aliases Fields » Field aliases Name Field aliases Owner App Sharing Status Actions syslog : FIELDALIAS-process_to_pcs process ASNEW pcs admin search Global | Permissions Enabled Clone | Move | Delete </CODE></PRE> <P>CLI </P> <PRE><CODE>/opt/splunk/etc/system/local/props.conf [syslog] FIELDALIAS-process_to_pcs = process ASNEW pcs </CODE></PRE> <P>Best Regards</P> Fri, 28 Jun 2019 01:23:19 GMT https://community.splunk.com/t5/Splunk-Search/Alias-bug-that-merge-quot-NEW-quot-word-into-new-field/m-p/444191#M125979 sonsee78 2019-06-28T01:23:19Z https://community.splunk.com/t5/Splunk-Search/Alias-bug-that-merge-quot-NEW-quot-word-into-new-field/m-p/444192#M125980 <P>I saw bug at the SPLUNK Enterprise version 7.3.0.</P> Fri, 28 Jun 2019 01:29:45 GMT https://community.splunk.com/t5/Splunk-Search/Alias-bug-that-merge-quot-NEW-quot-word-into-new-field/m-p/444192#M125980 sonsee78 2019-06-28T01:29:45Z https://community.splunk.com/t5/Splunk-Search/Alias-bug-that-merge-quot-NEW-quot-word-into-new-field/m-p/444193#M125981 <P>@sonsee78 use the option <CODE>Overwrite field values</CODE> while creating <CODE>Field Alias</CODE> otherwise above is expected behavior.</P> Fri, 28 Jun 2019 03:19:47 GMT https://community.splunk.com/t5/Splunk-Search/Alias-bug-that-merge-quot-NEW-quot-word-into-new-field/m-p/444193#M125981 niketn 2019-06-28T03:19:47Z