https://community.splunk.com/t5/Splunk-Search/rename-the-filed-values/m-p/270291#M176793 <P>You can use eval command like this</P> <PRE><CODE>your base search | eval salesorg=if(dist=10,"xyz",salesorg) </CODE></PRE> Thu, 08 Sep 2016 15:58:04 GMT somesoni2 2016-09-08T15:58:04Z https://community.splunk.com/t5/Splunk-Search/rename-the-filed-values/m-p/270290#M176792 <P>Hi,<BR /> I have two fields salesorg and dist. whenever i have salesorg=2220 and dist=10 i want to change salesorg as xyz. can you please tell me which command suits for this?</P> Thu, 08 Sep 2016 15:42:17 GMT https://community.splunk.com/t5/Splunk-Search/rename-the-filed-values/m-p/270290#M176792 uhkc777 2016-09-08T15:42:17Z https://community.splunk.com/t5/Splunk-Search/rename-the-filed-values/m-p/270291#M176793 <P>You can use eval command like this</P> <PRE><CODE>your base search | eval salesorg=if(dist=10,"xyz",salesorg) </CODE></PRE> Thu, 08 Sep 2016 15:58:04 GMT https://community.splunk.com/t5/Splunk-Search/rename-the-filed-values/m-p/270291#M176793 somesoni2 2016-09-08T15:58:04Z