I have a search, which have different field names per event which I need to output in a table. There is no pattern in the values, all I know is the that the value can be called ABC, ACB, CBA, CAB, BCA or BAC the list will be growing over time, so maintaining this in a CSV file in crucial and I do not want to go with FIELDALIAS's. I basically want to rename ABC, ACB, CBA, CAB, BCA and BAC to COMMON to use it in my output.
I came up with this, which do what I want for ABC, but I need a solution that renames all fields in my list:
rename.csv:
rename
ABC
ACB
CBA
CAB
BCA
BAC
Query:
base search | rename [| rename.csv | fields rename| return $rename ] as COMMON| table COMMON
What is the better solution to what I am trying to do?
Thanks,
... View more