You can create a duplicate of an imported or extracted field.

Cloning a field can be useful when you want to extract more than one field from an event and both fields appear in a similar context. Go to the Fields Library page and locate the extracted field you want to clone. When you clone a field, VMware Aria Operations for Logs (SaaS) creates a copy of the field with the word Copy appended to the field name. Modify the values in the Clone Field window and save your work.

Prerequisites

Verify that you are logged in to the VMware Aria Operations for Logs (SaaS) web user interface as an administrator.

Procedure

  1. Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
  2. Go to the Explore Logs page.
  3. In the upper-right corner of the Fields section, click Fields Library.
  4. Locate the field you want to clone. You can search by field name or filter fields by their source.
  5. In the field card, click the Clone field icon.
    Note: You cannot clone indexed fields.
    The Clone Field window appears and displays the field's values and the name of the field you cloned with the word Copy appended.
  6. Provide or modify the values as required.
  7. Click Save.