https://community.splunk.com/t5/Splunk-Search/search-using-terms-from-lookup-in-an-mv-string-field/m-p/583263#M203092 <P>I have an mvfield&nbsp; of type string in my results.&nbsp;</P><P>I want to search and match all values of this field for words that come from a csv lookup.&nbsp;</P><P>LookupRows:&nbsp;</P><P>{row1, "mary white"}&nbsp;</P><P>{row2, "Tom White"}&nbsp;</P><P>Results</P><P>Astring="Mary had a white lamb" , "tom had none" , "Joe was here"&nbsp;</P><P>Astring="No match here" , "tom thumb"&nbsp;</P><P>Searching with the lookup values against the full text of the event is not an acceptable answer.&nbsp;</P> Tue, 01 Feb 2022 18:33:15 GMT drodman29 2022-02-01T18:33:15Z https://community.splunk.com/t5/Splunk-Search/search-using-terms-from-lookup-in-an-mv-string-field/m-p/583263#M203092 <P>I have an mvfield&nbsp; of type string in my results.&nbsp;</P><P>I want to search and match all values of this field for words that come from a csv lookup.&nbsp;</P><P>LookupRows:&nbsp;</P><P>{row1, "mary white"}&nbsp;</P><P>{row2, "Tom White"}&nbsp;</P><P>Results</P><P>Astring="Mary had a white lamb" , "tom had none" , "Joe was here"&nbsp;</P><P>Astring="No match here" , "tom thumb"&nbsp;</P><P>Searching with the lookup values against the full text of the event is not an acceptable answer.&nbsp;</P> Tue, 01 Feb 2022 18:33:15 GMT https://community.splunk.com/t5/Splunk-Search/search-using-terms-from-lookup-in-an-mv-string-field/m-p/583263#M203092 drodman29 2022-02-01T18:33:15Z https://community.splunk.com/t5/Splunk-Search/search-using-terms-from-lookup-in-an-mv-string-field/m-p/583392#M203149 <P>Resolved using a _raw rename.&nbsp;</P><P>BaseSearch | eval MyRaw=_raw | mvexpand Astring | eval _raw=Astring | search [|inputlookup searchterms.csv] | table _time, Astring&nbsp;</P> Wed, 02 Feb 2022 13:32:24 GMT https://community.splunk.com/t5/Splunk-Search/search-using-terms-from-lookup-in-an-mv-string-field/m-p/583392#M203149 drodman29 2022-02-02T13:32:24Z