Hello, I would like to ask you how to rename field name like "${http.headers.ClientSide}". Such names are generated by Axway API GW into audit log. Searching and filtering is working when i use backslahes: index="axway" source="group-6_instance-9.log"| spath "customMsgAtts.\$\{http.headers.ClientSide\}" | search "customMsgAtts.\$\{http.headers.ClientSide\}"="165.72.31.104" but renaming does nothing: index="axway" source="group-6_instance-9.log" | rename customMsgAtts.\$\{http.headers.ClientSide\} as "ClientSide" I have tried also various codes: index="axway" source="group-6_instance-9.log" | rename customMsgAtts.${http.headers.ClientSide} as "ClientSide" and index="axway" source="group-6_instance-9.log" | rename "customMsgAtts.\$\{http.headers.ClientSide\}" as "ClientSide" with no result. Any hint what I am doing wrong? Source data: { correlationId: 4b22b65b1133c88ed95c0591 customMsgAtts: { ${http.headers.ClientSide}: 165.72.31.104 http.destination.host: localhost service.name: Healthcheck } duration: 2 legs: [ [+] ] path: /healthcheck/ protocol: https protocolSrc: 48065 serviceContexts: [ [+] ] status: success time: 1538662987857 type: transaction } Thanks in advance Reddy ... View more