<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Lookup table for lot of fields in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Lookup-table-for-lot-of-fields/m-p/482103#M195718</link>
    <description>&lt;P&gt;My event log has comma separated field values of 100+ fields. Each field can have about 2-15 different values. Example if field10=3, I need to map to earth, field10=4, map to mars so on. If field11=4, map to blue, field11=5, map to red and so on. Please help with an example format of lookup csv and how to use it in the search bar so the searched events in the output show with the mapped values. thank you&lt;/P&gt;</description>
    <pubDate>Sat, 14 Sep 2019 14:06:03 GMT</pubDate>
    <dc:creator>smiththebest</dc:creator>
    <dc:date>2019-09-14T14:06:03Z</dc:date>
    <item>
      <title>Lookup table for lot of fields</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Lookup-table-for-lot-of-fields/m-p/482103#M195718</link>
      <description>&lt;P&gt;My event log has comma separated field values of 100+ fields. Each field can have about 2-15 different values. Example if field10=3, I need to map to earth, field10=4, map to mars so on. If field11=4, map to blue, field11=5, map to red and so on. Please help with an example format of lookup csv and how to use it in the search bar so the searched events in the output show with the mapped values. thank you&lt;/P&gt;</description>
      <pubDate>Sat, 14 Sep 2019 14:06:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Lookup-table-for-lot-of-fields/m-p/482103#M195718</guid>
      <dc:creator>smiththebest</dc:creator>
      <dc:date>2019-09-14T14:06:03Z</dc:date>
    </item>
  </channel>
</rss>

