topic How to read a number, then convert to corresponding string and stats table? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-read-a-number-then-convert-to-corresponding-string-and/m-p/448821#M78002 <P>I am trying to extract a module/level ID from my logs and have splunk take that ID and match it to the corresponding name from a csv file and put that into a stats table, please help.</P> <P>Thanks!</P> Tue, 25 Jun 2019 15:26:09 GMT bryceweb22 2019-06-25T15:26:09Z How to read a number, then convert to corresponding string and stats table? https://community.splunk.com/t5/Getting-Data-In/How-to-read-a-number-then-convert-to-corresponding-string-and/m-p/448821#M78002 <P>I am trying to extract a module/level ID from my logs and have splunk take that ID and match it to the corresponding name from a csv file and put that into a stats table, please help.</P> <P>Thanks!</P> Tue, 25 Jun 2019 15:26:09 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-read-a-number-then-convert-to-corresponding-string-and/m-p/448821#M78002 bryceweb22 2019-06-25T15:26:09Z Re: How to read a number, then convert to corresponding string and stats table? https://community.splunk.com/t5/Getting-Data-In/How-to-read-a-number-then-convert-to-corresponding-string-and/m-p/448822#M78003 <P><A href="https://docs.splunk.com/Documentation/Splunk/7.3.0/Knowledge/Aboutlookupsandfieldactions">https://docs.splunk.com/Documentation/Splunk/7.3.0/Knowledge/Aboutlookupsandfieldactions</A></P> <P>You want to make and use a lookup</P> Tue, 25 Jun 2019 15:42:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-read-a-number-then-convert-to-corresponding-string-and/m-p/448822#M78003 starcher 2019-06-25T15:42:51Z Re: How to read a number, then convert to corresponding string and stats table? https://community.splunk.com/t5/Getting-Data-In/How-to-read-a-number-then-convert-to-corresponding-string-and/m-p/448823#M78004 <P>YourSearch | rex field=_raw max_match=0 "level ID":\"(?&lt; ID&gt;\d+)\"" <BR /> | lookup file.csv level ID as ID OUTPUT corresponding_name<BR /> | table corresponding_name count </P> <P>Save your .csv to lookup folder</P> <P>file.csv</P> <P>ID corresponding_name<BR /> 1 A<BR /> 2 B</P> <P>This should work.</P> Wed, 30 Sep 2020 01:06:06 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-read-a-number-then-convert-to-corresponding-string-and/m-p/448823#M78004 sandeepmakkena 2020-09-30T01:06:06Z