I have upgraded to Splunk 6.5, and have a new source, with some base64 encoded values.
I have tried looking at the varios add-ons, I could find, but none of them seems to support Splunk6.5.
Any ideas are welcome.
I don't think there is any other option (right now) than building your own command if you can't use an existing add-on/app.
Note, many times an add-on or an app built for 6.2 or 6.3 will actually work on 6.5 - the author hasn't tested or indicated as such on Splunkbase.
Regardless, looking at either of the two old apps/add-ons may be an opportunity for you to learn the ins and outs of building your own SPL commands.
View solution in original post
I built a macro to convert base64 fields and append them to your search results since I wasn't able to install apps with my privileges.