topic Re: Can I modify Data from Splunk using Splunk API? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90417#M18747 <P>Yes. That is what mean. Edit as in change data that is already in Splunk's index.</P> Tue, 13 Mar 2012 06:22:19 GMT misteryuku 2012-03-13T06:22:19Z Can I modify Data from Splunk using Splunk API? https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90415#M18745 <P>Lets say if i do not search for the data using the splunk search then can i edit the data directly from the splunk server using the Splunk's REST api?</P> Tue, 13 Mar 2012 05:56:48 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90415#M18745 misteryuku 2012-03-13T05:56:48Z Re: Can I modify Data from Splunk using Splunk API? https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90416#M18746 <P>Edit as in change data that is already in Splunk's index? No. Once data is indexed, there is no (easy) way of altering it.</P> Tue, 13 Mar 2012 06:21:15 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90416#M18746 Ayn 2012-03-13T06:21:15Z Re: Can I modify Data from Splunk using Splunk API? https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90417#M18747 <P>Yes. That is what mean. Edit as in change data that is already in Splunk's index.</P> Tue, 13 Mar 2012 06:22:19 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90417#M18747 misteryuku 2012-03-13T06:22:19Z Re: Can I modify Data from Splunk using Splunk API? https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90418#M18748 <P>OK. In that case the answer is no.</P> Tue, 13 Mar 2012 06:23:05 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90418#M18748 Ayn 2012-03-13T06:23:05Z Re: Can I modify Data from Splunk using Splunk API? https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90419#M18749 <P>Normally when log file data is sent to splunk, splunk indexes the file data right? When you search for the result using Splunk's REST API, the result normally returns indexed data right? Am i right in both statements i made?</P> Tue, 13 Mar 2012 06:24:32 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90419#M18749 misteryuku 2012-03-13T06:24:32Z Re: Can I modify Data from Splunk using Splunk API? https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90420#M18750 <P>When you search in Splunk - regardless of which method you're using - you're getting your results from Splunk's index, yes.</P> Tue, 13 Mar 2012 06:30:06 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90420#M18750 Ayn 2012-03-13T06:30:06Z Re: Can I modify Data from Splunk using Splunk API? https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90421#M18751 <P>Could you tell us a bit more about what you're trying to achieve?</P> Tue, 13 Mar 2012 06:45:30 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90421#M18751 Ayn 2012-03-13T06:45:30Z Re: Can I modify Data from Splunk using Splunk API? https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90422#M18752 <P>Nothing i just want to know if there is such thing as updating the indexed data since i don't see any documentation on that on this Splunk website.</P> Tue, 13 Mar 2012 06:56:33 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-modify-Data-from-Splunk-using-Splunk-API/m-p/90422#M18752 misteryuku 2012-03-13T06:56:33Z