How come our field aliases are not working in Splunk?

[merp96]

Hi

I have created a field alias stanza in props in the heavy forwarder, but I'm not able to see the fields in the search head.

The below is the stanza.

[sourcetype1]
FIELDALIAS-userid = user AS Emp_ID name AS Emp_Name

Not sure what I am missing here.

[HiroshiSatoh · Accepted solution]

The field alias must be present in the search head( OR indexer) as it will be referenced at the time of the search.

[merp96]

Thanks @HiroshiSatoh . Will try in indexer.