Lookup: Replace / Create new field

[test_qweqwe]

Hi.
For example:
When I run search and see field Sub_Status - 0xC0000064 I wanna new field that will explain what the code is it.

[test_qweqwe · Accepted solution]

http://docs.splunk.com/Documentation/Splunk/6.3.2/Knowledge/Usefieldlookupstoaddinformationtoyoureve...