Hi team,  I've signed up for a Splunk enterprise trial to check out the features. I've installed the Fortigate add on.  I've built custom visualizations, eg: number of sessions against srcip, number of bytes in against srcip, data usage against fw policy id.      `fgt_traffic` |timechart count by srcip `fgt_traffic` | eval bytes = (bytes/(1024*1024))|timechart sum(bytes) by srcip (index=* OR index=_*) (eventtype=ftnt_fgt_traffic) |eval sum(bytes) = bytes | eval bytes = bytes/(1024*1024*1024) | rename bytes AS RootObject.bytes policyid AS RootObject.policyid | fields "_time" "host" "source" "sourcetype" "RootObject.bytes" "RootObject.policyid" | stats dedup_splitvals=t sum(RootObject.bytes) AS "Sum of bytes" by RootObject.policyid | sort limit=0 RootObject.policyid | fields - _span | rename RootObject.policyid AS "Policy ID" | fields "Policy ID", "Sum of bytes"             What I want to do is to name these so I don't have to refer back to the documentation all the time.  Can someone advise me on how to do this? I am on Splunk Enterprise Version:8.1.2 Build:545206cc9f70 Products:hadoop Thank you!  - Shenath ... View more