Trying to figure out if can rename field names using lookup and CSV file. Something like this:
index=main d_name="\*" | dedup d_name | table _time d_name plat d_man d_mod user | rename d_name TO ***value from csv lookup***
csv file:
fieldname,tableheader
d_name, Device Name
plat, Platform
d_man, Manufacturer
d_mod, Model
user, User
↧