An alternate name that you assign to a field, allowing you to use that name to search for events that contain that field. A field can have multiple aliases. Each alias applies to only one field. An alias does not replace a field in an event or remove it from an event. It is added to the event alongside the field.

You can use field aliasing to normalize field names.

Was this article helpful to you? No Yes

How can we help?