# Unable to extract value in lookup table

**URL:** <https://community.graylog.org/t/unable-to-extract-value-in-lookup-table/15344>\
**Category:** Graylog Central (peer support)\
**Created:** [May 8, 2020, 10:42am UTC](https://community.graylog.org/t/unable-to-extract-value-in-lookup-table/15344 "2020-05-08T10:42:04Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hydra\_sp](https://avatars.discourse-cdn.com/v4/letter/h/dec6dc/32.png) [@Hydra\_sp](https://community.graylog.org/u/Hydra_sp)\
**Post date:** [May 8, 2020, 10:42am UTC](https://community.graylog.org/t/unable-to-extract-value-in-lookup-table/15344/1 "2020-05-08T10:42:04Z")

</div>

Hi,

I have a log line the following format:

{  
“Details”:“request”,  
“Other”:{  
“DT”:“1”,  
“St”: 2,  
}  
}

I have applied select\_jsonpath to set field from json.  
I need to use lookup table to get some values like parameter DT value 1 i need to replace from lookup to sell.

Here is my lookuptable.csv

“DT”,“Details”  
0,“Buy”  
1,“Sell”  
Here are the rules and lookup config i have used

 ![lookup](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/8/8dde6bd29bb10a59bafb63d6ebedff2274270736.png) ![pipeline](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/0/0dfa25dfe0cd39f18aebb96e965eaae4eee02d21.png) ![pipeline1](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/8/8746a1c451d14b151e8ce2a9a7bcd2f87886b5a2.png)

I want to use select\_jsonpath to pipeline json fields.kindly help with the solution to implement lookup along with select\_jsonpath.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 22, 2020, 10:51am UTC](https://community.graylog.org/t/unable-to-extract-value-in-lookup-table/15344/2 "2020-05-22T10:51:59Z")

</div>

Closed on May 22, 2020, 10:51am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.