This topic describes how to specify an alias for a field when you collect logs.

A field name specified in an SQL statement must contain letters, digits, and underscores (_). The name must start with a letter.

If you have configured a field name such as User-Agent that does not comply with the SQL standard, you must specify an alias for the field on the index configuration page. The alias applies only to analysis based on SQL statements. You must specify the original field name when you perform a search.

In addition, you can specify an alias for a field in an SQL statement when the original name is long.

Table 1. Examples
Original column name Alias
User-Agent ua
User.Agent ua
123 col
abceefghijklmnopqrstuvw a