Getting Data In

Help with field aliases for XML file

smcdonald20
Path Finder

Hi,

I have imported an XML file to Splunk, but want to change the field names to something more user friendly.
I know that i need to edit the props.conf file but am not sure what to put for the part.

Example
Field name before: "GPO.LinksTo.SOMPath"
Desired field name: "OU-Link"

What do I need to change props.conf to?

FIELDALIAS- = AS

0 Karma

HiroshiSatoh
Champion

It can also be added from the GUI.

alt text

0 Karma
Get Updates on the Splunk Community!

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...