Is it possible to change case of a column name?

[ma_anand1984]

I would like to change case of column name. Is it possible. My column name changes at run time and is not known at the time of writing the query

[DalJeanis]

If you want ALL fieldnames to be upper case, then do this at the end...

| streamstats count as recno
| untable recno fieldname fieldvalue
| eval fieldname = upper(fieldname)
| xyseries recno fieldname fieldvalue
| fields - recno

Be aware that the above code will turn multivalue fields to single value fields as if they had been nomved. The following code will protect an mv field called "foo".

| streamstats count as recno
| eval foo = mvjoin(foo,"!!!!")
| untable recno fieldname fieldvalue
| eval fieldname = upper(fieldname)
| xyseries recno fieldname fieldvalue
| eval FOO = split(FOO,"!!!!")
| fields - recno

[grantsmiley]

see if this helps you
| foreach * [| eval "uppered<<MATCHSTR>>"='<<MATCHSTR>>' ]

[grantsmiley]

That's a way to get the dynamic column name thing solved.

[asimagu]

I am guessing you want the column name to be renamed for the result of the search?

If that is the case you can pipe your search to

| rename column_name AS "your_new_name"

if you want to change the name of the field before doing calculations with the new name, you should use the eval command

| eval new_name=old_name

[ma_anand1984]

@asimagu Thanks for your reply but it didnt answer my query. I dont know the column name. it is created at run time.
| rename column_name AS "your_new_name". i want "your_new_name" to be like "COLUMN_NAME" - upper case of whatever is present in the column