https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571855#M8545 <P>You could transpose, duplicate the header column and transpose again</P><LI-CODE lang="markup">| inputlookup lookup.csv | transpose 0 header_field="NAME" column_name="NAME" | eval header=NAME | transpose 0 header_field=header column_name="NAME"</LI-CODE><P>&nbsp;</P> Thu, 21 Oct 2021 16:43:55 GMT ITWhisperer 2021-10-21T16:43:55Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571848#M8544 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="smart111_0-1634832219579.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/16532i211B9DA1223A5A9A/image-size/medium?v=v2&amp;px=400" role="button" title="smart111_0-1634832219579.png" alt="smart111_0-1634832219579.png" /></span></P><P><BR />Is there any way to get those header names as field values from lookup files?<BR />Please give me any idea with SPL</P><P>&nbsp;</P> Thu, 21 Oct 2021 16:06:06 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571848#M8544 smart111 2021-10-21T16:06:06Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571855#M8545 <P>You could transpose, duplicate the header column and transpose again</P><LI-CODE lang="markup">| inputlookup lookup.csv | transpose 0 header_field="NAME" column_name="NAME" | eval header=NAME | transpose 0 header_field=header column_name="NAME"</LI-CODE><P>&nbsp;</P> Thu, 21 Oct 2021 16:43:55 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571855#M8545 ITWhisperer 2021-10-21T16:43:55Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571856#M8546 <P>Can you explain the use case a little bit more? This looks like it might be a screenshot from Microsoft Excel.&nbsp;<BR /><BR />Have you looked into the Lookup File Editor App?&nbsp;&nbsp;<A href="https://splunkbase.splunk.com/app/1724/" target="_blank">https://splunkbase.splunk.com/app/1724/</A><BR /><BR /></P> Thu, 21 Oct 2021 16:45:27 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571856#M8546 ryanoconnor 2021-10-21T16:45:27Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571865#M8547 <P>Thank you so much,&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;</P><P>This way is exactly I wanted.</P> Thu, 21 Oct 2021 16:59:44 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571865#M8547 smart111 2021-10-21T16:59:44Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571869#M8548 <P>Thank you for answering&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/216008">@ryanoconnor</a>&nbsp;</P><P>I actually wanted to set a dropdown list of lookup header values on dashboard and make it possible to choose a primary key to&nbsp; lookup reference field dynamically.</P><P>Thank you for your kindness.</P> Thu, 21 Oct 2021 17:06:03 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-lookup-header-names-as-field-s-values/m-p/571869#M8548 smart111 2021-10-21T17:06:03Z