ES|QL RENAME command
The RENAME processing command renames one or more columns.
RENAME old_name1 AS new_name1[, ..., old_nameN AS new_nameN]
The following syntax is also supported
RENAME new_name1 = old_name1[, ..., new_nameN = old_nameN]
Tip
Both syntax options can be used interchangeably but we recommend sticking to one for consistency and readability.
old_nameX- The name of a column you want to rename.
new_nameX- The new name of the column. If it conflicts with an existing column name, the existing column is dropped. If multiple columns are renamed to the same name, all but the rightmost column with the same new name are dropped.
The RENAME processing command renames one or more columns. If a column with
the new name already exists, it will be replaced by the new column.
A RENAME with multiple column renames is equivalent to multiple sequential RENAME commands.
FROM employees
| KEEP first_name, last_name, still_hired
| RENAME still_hired AS employed
FROM employees
| KEEP first_name, last_name
| RENAME first_name AS fn, last_name AS ln
The same result can be achieved with multiple RENAME commands:
FROM employees
| KEEP first_name, last_name
| RENAME first_name AS fn
| RENAME last_name AS ln