I want to edit fields after Splunk produces results in a table.
index=info |table roll_number name
001 mark storm
002 emma stone
Now my user should be able to edit results directly from table itself.
Is it possible?
You can use this app available on splunkbase...
It lets you edit values from a KV store using excel like GUI
The simplest way would be to write the results to a KV Store and then build a simple html page with a custom editor to update the values: