I am trying to use a lookup table to perform a series of string replacements on a single field in a search result The lookup table has two fields: find_string, replace_string (??? find_string may need to be a regex for this purpose ???) Then, for every row/event in the search result, I need it to iterate over the lookup table and perform the following operation for a single field from the search results (call it search_field) :   | eval search_field = replace(search_field, find_string, replace_string)   The search_field mutations should be cumulative within each search row/event.  In other words, the return value from the replace function will become the input to the next iteration, until every entry in the lookup table has been iterated over.  Then it moves onto the next row/event and starts over with the original value of search_field at the start of the lookup table, ETC... I have tried many different approaches to this, with no success.  Apparently unlike SQL, subsearches in Splunk are unable to access fields from the outer search.  (???)  I have also had no success with the map command.  This seems like a fairly basic operation in most programming languages, and I think it would be even be do-able in SQL.  Is it even possible to do this with Splunk? ... View more