I have a variable portion of a log file that is structured, all IDs are numeric. There are over 100K possible different IDs. It is not a fixed set of IDs, so coding individual field names doesn't work.
[id-1=cnt-1, id-2=cnt2, id-3=cnt3, ...,id-n=cnt-n]
this is parsed as
| rex field=stats max_match=100 "(?\d=\d)"
I want to replace the numeric id-n with a name from a table. I have the dbx lookup defined that provides