<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Possible To Insert Your Own Values? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Possible-To-Insert-Your-Own-Values/m-p/105873#M27505</link>
    <description>&lt;P&gt;I was curious if it is possible to insert your own values into a chart/table? For instance if I had a search that returned five different host names in a column and in the next column it had a number that represented something. Could I manually create a third column and insert values that I need? If so what would the script look like to do this? Thanks in advance!&lt;/P&gt;</description>
    <pubDate>Fri, 30 Mar 2012 20:57:04 GMT</pubDate>
    <dc:creator>henryt1</dc:creator>
    <dc:date>2012-03-30T20:57:04Z</dc:date>
    <item>
      <title>Possible To Insert Your Own Values?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Possible-To-Insert-Your-Own-Values/m-p/105873#M27505</link>
      <description>&lt;P&gt;I was curious if it is possible to insert your own values into a chart/table? For instance if I had a search that returned five different host names in a column and in the next column it had a number that represented something. Could I manually create a third column and insert values that I need? If so what would the script look like to do this? Thanks in advance!&lt;/P&gt;</description>
      <pubDate>Fri, 30 Mar 2012 20:57:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Possible-To-Insert-Your-Own-Values/m-p/105873#M27505</guid>
      <dc:creator>henryt1</dc:creator>
      <dc:date>2012-03-30T20:57:04Z</dc:date>
    </item>
    <item>
      <title>Re: Possible To Insert Your Own Values?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Possible-To-Insert-Your-Own-Values/m-p/105874#M27506</link>
      <description>&lt;P&gt;Hi henryt1,&lt;/P&gt;

&lt;P&gt;I think you should look at lookups... &lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/knowledge/Addfieldsfromexternaldatasources"&gt;http://docs.splunk.com/Documentation/Splunk/latest/knowledge/Addfieldsfromexternaldatasources&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;If you're information is fairly static and can be stored in a csv file you should look here (this file obviously can be updated by a script if the need is required, but that's another story)...&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/User/CreateAndConfigureFieldLookups"&gt;http://docs.splunk.com/Documentation/Splunk/latest/User/CreateAndConfigureFieldLookups&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Regards,&lt;/P&gt;

&lt;P&gt;MHibbin&lt;/P&gt;</description>
      <pubDate>Fri, 30 Mar 2012 21:14:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Possible-To-Insert-Your-Own-Values/m-p/105874#M27506</guid>
      <dc:creator>MHibbin</dc:creator>
      <dc:date>2012-03-30T21:14:11Z</dc:date>
    </item>
  </channel>
</rss>

