The transforms spec indicated that you can do a lookup using a python script. Do you have an example?
I think if someone has already developed similar article to connect to DB2 database and lookup table at search time then please publish it otherwise i am working on it and will be glad to publish it if i get little help from Splunk Forums on how to integrate my working copy under Python 2.7 with Splunk Python 2.6
Not really, but it's the same. All you do is add another column to the output CSV and add the extra field in the appropriate places in the configuration. Basically, Splunk passes a CSV file in to the script, with lookup values in the input columns/fields and null values in the output columns/fields, and your script should write out a CSV with all the fields filled in.