alias

alias

noun

An alternate name that you assign to a field, allowing you to use that name to search for events that contain that field. A field can have multiple aliases. Each alias applies to only one field. An alias does not replace a field in an event or remove it from an event. It is added to the event alongside the field.

You can use field aliasing to normalize field names.

Related terms

• tag

For more information

In the Knowledge Manager Manual:

• About tags and aliases
• Tag and alias field values in Splunk Web
• Create aliases for fields