New to Splunk. Trying to use the "as" command modifier to change the name of a column. However, the modifier is not being highlighted or changing the column name.
Here is my SPL string:
*sourcetype="access_combined_wcookie" status=200 file="success.do"
| table JSESSIONID as UserSession*
↧