There are few ways to perform this,
|inputlookup abc.csv | <content modify search> | outputlookup abc.csvYour
<content modify search>can be something like
|eval <fieldname>=if(fieldname=="something","newvalue","oldvalue")etc., to update field such as
fieldnamevalues with the new content. Above logic varies based on your requirement, please check eval documentation here (https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/CommonEvalFunctions)
Thanks. My objective over here is that i am having some static content which i am loading into the csv file and then reading it using inputlookup. After updating the content curently i have to replace the file in splunk back again.