https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458043#M168119 <P>@marziaolla,</P> <P>Try this </P> <PRE><CODE>| makeresults |eval abc="123",xyz="567"|eval tmp="abc".xyz|eval {tmp}="To be replaced by value of field"|fields - tmp </CODE></PRE> Thu, 26 Jul 2018 16:21:09 GMT renjith_nair 2018-07-26T16:21:09Z https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458042#M168118 <P>Hello there, </P> <P>After a stats command, I would like to rename the name of a field using a string and the value of another field<BR /> eg. fieldname i'd like -&gt; "ABC 2018" but 2018 is stored in a field</P> <P>I've tried with eval {ABC}="ABC".year but it doesn't work.</P> <P>can someone help me?<BR /> TNX <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 26 Jul 2018 16:07:07 GMT https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458042#M168118 marziaolla 2018-07-26T16:07:07Z https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458043#M168119 <P>@marziaolla,</P> <P>Try this </P> <PRE><CODE>| makeresults |eval abc="123",xyz="567"|eval tmp="abc".xyz|eval {tmp}="To be replaced by value of field"|fields - tmp </CODE></PRE> Thu, 26 Jul 2018 16:21:09 GMT https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458043#M168119 renjith_nair 2018-07-26T16:21:09Z https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458044#M168120 <P>@marziaolla, did it work for you ?</P> Sun, 29 Jul 2018 01:07:41 GMT https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458044#M168120 renjith_nair 2018-07-29T01:07:41Z https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458045#M168121 <P>Like this:</P> <PRE><CODE>| makeresults | eval XYZ="123" | eval year="2018" | rename StuffBelowIsTheSame AS "rename XYZ AS ABC2018" | eval newname="ABC" . year | eval {newname}=XYZ | fields - newname XYZ </CODE></PRE> Sun, 29 Jul 2018 02:05:45 GMT https://community.splunk.com/t5/Splunk-Search/rename-the-name-of-a-field-with-the-value-of-another-field/m-p/458045#M168121 woodcock 2018-07-29T02:05:45Z