I have been watching a problem when I was using alias function through the SPLUNK Web.
That problem was merged "NEW" word, both have Web and CLI.
Fields » Field aliases
Name Field aliases Owner App Sharing Status Actions
syslog : FIELDALIAS-process_to_pcs process ASNEW pcs admin search Global | Permissions Enabled Clone | Move | Delete
FIELDALIAS-process_to_pcs = process ASNEW pcs