How to rename columns in Splunk?

How to rename columns in Splunk?

rename can be used to change or update the columns in Splunk.

Syntax:

Your Splunk Query
| rename <Original Column Name> as <New Column Name>

Example:

Your Splunk Query
| rename CustomerNumber as CustomerId

As per the above example, the CustomerNumber column is renamed to CustomerId.

Leave a Reply