I am trying to add a new field to my search results via a custom search command written in python
Take the following snippet from the script:
When I run a search which uses this custom search command I don't see the Test field appearing in the events list, events table or results table. Just wondering if my expectation is incorrect in terms of Splunk being able to do this
asked 04 May '12, 03:20
You have to output the results after the loop (ie. once you've modified them).
answered 04 May '12, 03:26