https://community.splunk.com/t5/Splunk-Search/Translate-Column-values/m-p/183491#M52828 <P>HI,</P> <P>This can be done using <STRONG>Field aliasing</STRONG>. More details @ <A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/Knowledge/Addaliasestofields">http://docs.splunk.com/Documentation/Splunk/6.2.3/Knowledge/Addaliasestofields</A></P> <P>Thanks!!</P> Fri, 08 May 2015 10:36:27 GMT vganjare 2015-05-08T10:36:27Z https://community.splunk.com/t5/Splunk-Search/Translate-Column-values/m-p/183490#M52827 <P>Hi,<BR /> Say I have indexed a file that has this structure:</P> <P>1|A|B <BR /> 2|C|D</P> <P>I have a mapping like this :</P> <P>1="Val1"<BR /> 2="Val2"</P> <P>Only the first column need to be translated. Hence when user search for "B", I want to return</P> <P>Val1|A|B</P> <P>How can this done?<BR /> Thanks</P> Fri, 08 May 2015 10:32:40 GMT https://community.splunk.com/t5/Splunk-Search/Translate-Column-values/m-p/183490#M52827 michael_lee 2015-05-08T10:32:40Z https://community.splunk.com/t5/Splunk-Search/Translate-Column-values/m-p/183491#M52828 <P>HI,</P> <P>This can be done using <STRONG>Field aliasing</STRONG>. More details @ <A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/Knowledge/Addaliasestofields">http://docs.splunk.com/Documentation/Splunk/6.2.3/Knowledge/Addaliasestofields</A></P> <P>Thanks!!</P> Fri, 08 May 2015 10:36:27 GMT https://community.splunk.com/t5/Splunk-Search/Translate-Column-values/m-p/183491#M52828 vganjare 2015-05-08T10:36:27Z