Hi
I want to edit fields after Splunk produces results in a table.
Example search:
index=info |table roll_number name
Result
001 mark storm
002 emma stone
Now my user should be able to edit results directly from table itself.
Is it possible?
You can use this app available on splunkbase...
https://splunkbase.splunk.com/app/1724/
It lets you edit values from a KV store using excel like GUI
Like excel
The simplest way would be to write the results to a KV Store
and then build a simple html page with a custom editor to update the values:
http://dev.splunk.com/view/webframework-developapps/SP-CAAAEY7