Splunk Search

Change table data

creemer
Explorer

Hello!
I had rendered table.
How can I change cell value in this table from my Javascript?
And after that i want to save this changed table to lookup, like CSV, if it is possible...

Tags (2)
0 Karma

niketn
Legend

@creemer, based on further description seems like you need to edit and update a lookup file. This is a use case for KV Store where you can modify individual fields on a frequent basis. Following are couple of your options:

1) Try the Lookup File Editor from Splunkbase
2) Try out the KVStore Tutorial built using Splunk HTML dashboard

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

creemer
Explorer

I mean, for example:
I had the output from this search:

index="_internal" | timechart count(ev) as cnt span=5m

And want to change some value in some cell in "cnt" column by click on it.
I click on it, then appears some modal, or popup with input, where I can write some other value for this cell, can I ?
And after changing, I want to save it to CSV...

How may I grab all the data from table, for example in array(or anything else)?

PS Sorry for my english... 🙂

0 Karma

niketn
Legend

@creemer, for changing the cell value using Simple XML JS Extesion with Splunk JS Stack, please refer to Splunk Dashboard Examples app, which has couple of Examples for Table Cell Highlighting and Table Row Highlighting which access and modify cell value through TableView.BaseCellRenderer.extend

For pushing Table results to CSV refer to answer below:
https://answers.splunk.com/answers/600664/dashboard-button-to-run-spl-on-click.html#answer-606447

Can you also add details of what is the kind of table cell value that you are planning to make? Can it not happen directly via Search query?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...