Modify an Extracted Field

You can modify the definitions of extracted fields.

When you modify a field, all charts, queries, and alerts that use the field you have modified are updated to use the new definition.

VMware Aria Operations for Logs (SaaS) user accounts can modify only the extracted fields that they have created. VMware Aria Operations for Logs (SaaS) administrator accounts can modify their own content and shared content.

Procedure

1. Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
2. Go to the Explore Logs page.
3. In the upper-right corner of the Fields section, click Fields Library.
4. Locate the field that you want to modify. You can search by field name or filter fields by their source.
5. In the field card, click the Edit field icon.
6. Modify the values as required.
7. Click Save.