Hi
I have created a field alias stanza in props in the heavy forwarder, but I'm not able to see the fields in the search head.
The below is the stanza.
[sourcetype1]
FIELDALIAS-userid = user AS Emp_ID name AS Emp_Name
Not sure what I am missing here.
The field alias must be present in the search head( OR indexer) as it will be referenced at the time of the search.
The field alias must be present in the search head( OR indexer) as it will be referenced at the time of the search.
Thanks @HiroshiSatoh . Will try in indexer.