I have a data set that I am running a search on. From this data set I am creating a lookup of domains. I want to take that lookup and search a different set of data. In order to do that I need a second column in order to run a search on the lookup. I want the second column to be something like
Then I could run the following search on the lookup:
* | lookup domain fld | search baddomain=True
Is there a way to add the second column during the search? Is there a better way to accomplish what I am trying to do?