Hi,
I have imported an XML file to Splunk, but want to change the field names to something more user friendly.
I know that i need to edit the props.conf file but am not sure what to put for the part.
Example
Field name before: "GPO.LinksTo.SOMPath"
Desired field name: "OU-Link"
What do I need to change props.conf to?
FIELDALIAS- = AS
