Add manual input through text box into a new column in a table splunk

[nikitha15]

Hi ,

I want to add a text box in a dashboard panel and the manual input value of that textbox should be added to a new column in an already existing table.

I understand that this can be done by lookup to save the values but i am not sure how to go ahead with it.

This is the data format of the table i have with sample data(the original data i have is confidential).

EMAIL	NAME	IP	ID(new column)
nish123@gmail.com	Nishanth	10.10.10.0
abc098@gmail.com	ABC	224.0.0.0
amit187@gmail.com	Amit Sharma	63.125.0.0

I want to add a text box to this panel whose values should be inputted into ID column based on the unique value of EMAIL.

and i want to save this table with the new values of ID. 

How can this be done?? Any help would be appreciated.thanks

[ITWhisperer]

The way I have done something similar is possibly over-elaborate but I started with a lookup, as you mentioned, then populate the Id column from this lookup. In order to update the lookup, I have another panel where the key (email in this case) and new ID value can be added - I added checkbox to this for the use to confirm that the update was correct. Then on change for the checkbox, set tokens for a third panel to use to actually update the lookup with outputlookup. This third panel is hidden using the depends attribute. The third panel also resets the checkbox in the second panel so I can detect a new update, and it sets a token used in the first panel so that the panel gets refreshed. I have some other pieces set up so only certain users can update the lookup although to be fair these could be overridden reasonably easily if someone was determined enough.