Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How can I rename fields based on source

$
0
0
I have data coming in from two different sources wich both contains the same fieldname. how can I tell them apart in a search. For example: source1 have a field named ID and so does source2. How can I rename the ID from source1 to ID1 and the ID from source2 to ID2?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>