Splunk Filed Alias field name

Splunk's field name directly affects the search effect, so renaming is a better way:

In such a case, if a field in the three types of data has the same meaning and can be unified into one field, use an alias:

Use the following method:

2: One filed alias will be used for new filed in multiple types:

3: After creating the above three field aliases, go to Splunk UI to search:

Reference Documentation: Create field aliases in Splunk Web - Splunk Documentation