Splunk Search
Highlighted

Lookup: Replace / Create new field

Builder

Hi.
For example:
When I run search and see field Sub_Status - 0xC0000064 I wanna new field that will explain what the code is it.
alt text

0 Karma