Rename command

Splunk Search

What does
|rename field* AS * do.
How to rename the fields when there are more no.of fields.

Thanks

Hi @prettysunshinez,
you can rename more fileds at the same time, see this example:

index=_internal
| rename date* AS time*

Ciao.
Giuseppe

Get Updates on the Splunk Community!

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...

Join the Conversation