Splunk Search

how can we add data to a lookup file thorugh form ???

Motivator

Hi .

I have using a form with a textbox and search button ? wat ever the data i given in textbox it should be added to the lookup file.how can i do it ??

my lookup file is something like this Test.data

Mydata
213

Mydata is the field in the lookup file , now when ever i enter a new no in the text box it should append to the text file ?? how can i do this ?please help

Tags (1)
0 Karma

Contributor

The outputlookup command will push results from a search to a static lookup tabe. So your form needs to have a search that takes the value of the textfield and runs a search using the output lookup command.

See:
http://docs.splunk.com/Documentation/Splunk/5.0.4/SearchReference/Outputlookup

Note: I think before Splunk 5.0 you could not use this to append data. You could only replace a look table.

0 Karma

Splunk Employee
Splunk Employee

i think what you're looking for is a combination of a lookup and a workflow:
http://docs.splunk.com/Documentation/Splunk/5.0.2/Knowledge/CreateworkflowactionsinSplunkWeb

0 Karma