I've got a form being built in Splunk Enterprise, its used as a lookup table so we can see if there is a known issue with a host etc...
I use the issue field to have a drop down option, and the host and IP are manually input.
What I'd like is for the "added by" field to be automatically populated with the signed in users ID/name/Username etc...This is for audit purposes mainly.
I've looked around and can't seem to find out how to do this.
Any/all help is greatly appreciated.
I've got it. The idea was to have the username field auto-populated and to be read only so as to keep a record of which user submitted the item on the form.
I thought of having it as a box that would read the $env:user$ field, then pulling that to a table to be displayed underneath,
The issue was that if the username field pulls $env:user$, the user could simply edit that field to another users details.
Got round it by instead of pulling to the form box, then going to table, just pulling straight to table.
Thank you greatly for your help. That really helped.
that a fair point, I'd like the field to be used to capture whoever submitted the option in the form, but it doesnt need to be displayed I guess.
As such, if I just hid the field but retained all the features, it would capture the env:user information but then not leave it open to be edited
If you don't want the user to change it, why is it on the form in the first place?