Getting Data In

How to update a kvstore field from a local CSV file?

edroche3rd
Explorer

Happy Sunday All!

I added a field to my KVSTORE, but want to be able to backfill that field with the appropriate data. I don't have access to the server to put input file on server then input. Is there a way to do it from a CSV from my desktop?

Thanks
Ed

0 Karma

n00badmin
Communicator

You could make an API call to manage the store..

http://dev.splunk.com/view/webframework-features/SP-CAAAEZG

or use | outputlookup my_kvstore

from search results (if ur data is avail there), where my_kvstore is the name of your store, to overwrite that kvstore entry...
be sure you look up the key first so you update/delete the right record!

Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...