I would like to know if I can use Splunk to access and modify metadata. And if the answer is yes, which plugin or addon should I use?
Thank you for answering.
can you please let me know which metadata you mean? Did you mean indextime fields "host", "source" etc?
(or search time tstats based data)
What metadata do you want to change? The metadata/local.meta files can be modified however you like. Metadata about indexed data cannot be changed, however.