I have the below query, that works just fine. It searches the data set for a phone model and then displays a more human readable text for the phone model (example: Phone model before transforming it to a more human readable format SM-G930F, after transformation, Samsung Galaxy 7). What I need to do is have the user click on the friendly format and then do a drilldown using the non-friendly format (field=Properties.PlatformData.HM). I can do the drilldown part just don't know how have the clicked value from the drilldown (friendly format) transformed back into the non-friendly format. Any thoughts?
index=wholesale_app buildTarget=blah analyticType=SessionStart [search index=wholesale_app buildTarget=blah analyticType=Checkpoint Properties.index=39 OR Properties.index=40|dedup clientSessionId|table clientSessionId]|lookup phone_models_edited.csv Model AS Properties.platformData.HM
| stats count by Display_model | rename Display_model as "Phone Model" count as Count|sort -Count