How compare variable URLs in a log against a lookup table of significant, matching substrings?

[chaoservices]

I have large variable URLs being logged that may include a unique substring somewhere within that is significant. How do I compare that URL against a lookup table of significant substrings?

For example some URL fields:

• http://go.ABC123.com:80/ps/i.do?ty=bs&v=2.1&u=foo&it=search&p=GPS&dblist=&qt=OQE~foo2&sw=w&st=T003&a...
• http://go.ABC123.com:80/ps/i.do?v=2.1&u=foo&pg=BasicSearch&it=static&sw=w&p=GPS
• http://auth.123XYZ.com:80/cgi-bin/go_up_login?formu=cblez&formp=cblez&link=bkflix.ABC123XYZcompany.c...
• https://google.com:443/

Match against two significant lookups, (keyword, Database):

• "p=GPS" as "Database A"
• auth.123XYZ as "Database B"

Any thoughts?

[HiroshiSatoh]

how about this?
※Please change maxsearches as there are search counts that can be executed.

|inputlookup lookupfile |map search="search index=XXX $keyword$ |eval keyword=$keyword$,Database=$Database$"