You can create a duplicate of an imported or extracted field.

Cloning a field can be useful when you want to extract more than one field from an event and both fields appear in a similar context. Go to the Fields page and locate the extracted field you want to clone. When you clone a field, vRealize Log Insight Cloud creates a copy of the field with the word copy appended to the field name. Modify the values in the Clone Field window and save your work.

Prerequisites

Verify that you are logged in to the vRealize Log Insight Cloud web user interface as an administrator.

Procedure

  1. Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
  2. Go to the Explore Logs page.
  3. To open the Fields page, click the gear icon in the upper-right corner of the Fields section. This page lists all vRealize Log Insight Cloud fields by organizing them into two groups - fields found in queries and fields found in other fields.
  4. Locate the field you want to clone. You can use the Filter field to search.
  5. Click the three dots icon next to the field and select Clone.
    Note: You cannot clone indexed fields.
    The Clone Field window appears and displays the field's values and the name of the field you cloned with the word copy appended.
  6. Optionally, provide or modify the following values:
    • Name of the field in the Field Name text box
    • The field type and regular expression value in the Extracted Value section
    • The pre and post context regular expressions in the Location Context section
    • Keywords in the Additional Context section
  7. Click Save.