How do I read the field alias?

[danielbb]

When I see - FIELDALIAS-Status_as_Error_Code = Status AS Error_Code.

Does it mean that Status gets the value of Error_Code or the other way around?

[woodcock · Accepted solution]

It is this:

FIELDALIAS-<class> = <orig_field_name> AS <new_field_name>

Described here:
https://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Configurefieldaliaseswithprops.conf
So Error_Code gets the value of Status.

[danielbb]

Thank you @woodcock.