https://community.splunk.com/t5/Splunk-Search/Field-mapping-from-number-to-names/m-p/236527#M70262 <P>try like :</P> <PRE><CODE>your_base_search|stats list("fields name Event code") as " Event code" by "fields name of text description" |.... </CODE></PRE> Wed, 09 Mar 2016 12:29:00 GMT fdi01 2016-03-09T12:29:00Z https://community.splunk.com/t5/Splunk-Search/Field-mapping-from-number-to-names/m-p/236526#M70261 <P>Say for instance I am searching for windows event codes and types and I have a list of the event code mapping to their text description. How can I show in my search output the Event code mapped to their names? thanks</P> Wed, 09 Mar 2016 02:26:22 GMT https://community.splunk.com/t5/Splunk-Search/Field-mapping-from-number-to-names/m-p/236526#M70261 michael_lee 2016-03-09T02:26:22Z https://community.splunk.com/t5/Splunk-Search/Field-mapping-from-number-to-names/m-p/236527#M70262 <P>try like :</P> <PRE><CODE>your_base_search|stats list("fields name Event code") as " Event code" by "fields name of text description" |.... </CODE></PRE> Wed, 09 Mar 2016 12:29:00 GMT https://community.splunk.com/t5/Splunk-Search/Field-mapping-from-number-to-names/m-p/236527#M70262 fdi01 2016-03-09T12:29:00Z