alias


alias

noun

An alternate name that you assign to a field, allowing you to use that name to search for events that contain that field. A field can have multiple aliases. Each alias applies to only one field. An alias does not replace a field in an event or remove it from an event. It is added to the event alongside the field.

You can use field aliasing to normalize field names.

Related terms

For more information

In the Knowledge Manager Manual:

*
W