# Vlookup type of thing

**URL:** https://discuss.elastic.co/t/vlookup-type-of-thing/270298
**Category:** Kibana
**Created:** [April 15, 2021, 6:50pm UTC](https://discuss.elastic.co/t/vlookup-type-of-thing/270298 "2021-04-15T18:50:02Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Elitlogik](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elitlogik/32/78920_2.png) [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)
#### Post date: [April 15, 2021, 6:50pm UTC](https://discuss.elastic.co/t/vlookup-type-of-thing/270298/1 "2021-04-15T18:50:02Z")

</div>

I generate a table of MAC addresses in Kibana. However I’d like to translate the MAC address into a readable name. The MAC, Readable name table is and will forever be static and have and will forever have 50 rows.

What’s the simplest way to make that translation in Kibana?

The translation only has to be done when the table is drawn in the dashboard, no relationship with it ELK will benefit from the Readable name.

=vlookup(MAC;MacReadableNameTable;2;False)

Thank you very much for your support.

---

<div class="post-metadata">

### Author: ![Sandeep\_Raju](https://avatars.discourse-cdn.com/v4/letter/s/8797f3/32.png) [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)
#### Post date: [April 15, 2021, 7:45pm UTC](https://discuss.elastic.co/t/vlookup-type-of-thing/270298/2 "2021-04-15T19:45:52Z")

</div>

One way is you can write a scripted field which can rename your MAC address  
Other way you can go about is try to install a plugin for vlookup which is available in Github.

Regards

---

<div class="post-metadata">

### Author: ![Felix\_Roessel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felix_roessel/32/41623_2.png) [@Felix\_Roessel](https://discuss.elastic.co/u/Felix_Roessel)
#### Post date: [April 16, 2021, 5:22am UTC](https://discuss.elastic.co/t/vlookup-type-of-thing/270298/3 "2021-04-16T05:22:10Z")

</div>

You can create a static lookup within the index pattern field Management.

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [April 16, 2021, 6:01am UTC](https://discuss.elastic.co/t/vlookup-type-of-thing/270298/4 "2021-04-16T06:01:39Z")

</div>

Or use enrich your documents when indexing with an [enrich processor](https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest-enriching-data.html) do that data would be available wherever you used it.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 14, 2021, 6:02am UTC](https://discuss.elastic.co/t/vlookup-type-of-thing/270298/5 "2021-05-14T06:02:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.