Rename command

Splunk Search

What does
|rename field* AS * do.
How to rename the fields when there are more no.of fields.

Thanks

Hi @prettysunshinez,
you can rename more fileds at the same time, see this example:

index=_internal
| rename date* AS time*

Ciao.
Giuseppe

Get Updates on the Splunk Community!

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl. To make life better, use an ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...

Join the Conversation