How do you add notes for events?


I'm looking for a way to use a modal form to add comments to events. The behavior would be to click on an event, have a modal form displayed with a textfield box, the user adds their comments, and then posts the comments to a Splunk index.

The modal form isn't too much of a problem, I don't know how to get the information into Splunk (REST API maybe)?

0 Karma

Esteemed Legend

Splunk's product stores this kind of thing in a KV Store collection but you could also store it into a Summary Index using | collect.

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!