Splunk Windows TA for different language

[Alan_Chan]

I have both Chinese and English field names from the Windows event log, and I would like to use field aliases so that the English field names can search for both the Chinese and English fields. However, I found that some fields, such as src and src_port, are missing for the Chinese field. This issue might be related to the fact that field aliases take effect only after EXTRACT, REPORT, or LOOKUP. Does anyone have suggestions on how to effectively convert between Chinese and English field names?
(The only thing I can do is on the SH; I am not allowed to change the other instance.)

[kiran_panchavat]

@Alan_Chan 

If field aliases are not sufficient or if the fields are not being extracted properly, you can create Calculated Fields on the SH.

Navigate to Settings > Fields > Calculated Fields.
Use a simple eval expression to create a new field that maps to both the English and Chinese field names:

eval src=coalesce(src, "來源網路位址")
eval src_port=coalesce(src_port, "來源連接埠")

https://docs.splunk.com/Documentation/Splunk/9.4.0/Knowledge/CreatecalculatedfieldswithSplunkWeb 

https://docs.splunk.com/Documentation/Splunk/9.4.0/Knowledge/definecalcfields